Comment by vbezhenar

ssh is terribly insecure with no way of checking server certificate fingerprint automatically. Web solved it decades ago with CA.