There is a revocation system in place (the RevokedKeys directive in the sshd configuration file, which seems to be system-wide rather than configured at the user-level. At least, that’s the only way I’ve used it)
I agree with the sentiment though, it is far less extensive than traditional X.509 certificate infrastructure.
I agree with the sentiment though, it is far less extensive than traditional X.509 certificate infrastructure.