Comment by free-pmx

Some are using SSHFP DNS records nowadays, but it only is part of the solution and outsources the problem to a trusted (?) 3rd party.

It's quite surprising that SSH certs are not used much much more as they have been around 15 years with OpenSSH now.