Comment by raggi

Time for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.