SSH does in fact have a PKI, just not a global one. Large-fleet SSH installs all tend to use certificate authorities, for this reason (and to simplify SSO).
When I last harassed Crawshaw about this and we discussed bits, he submitted <a href="https://github.com/C2SP/C2SP/blob/main/well-known-ssh-hosts.md" rel="nofollow">https://github.com/C2SP/C2SP/blob/main/well-known-ssh-hosts....
Unfortunately neither of us has taken time (AFAIK) to go back and implement it anywhere.
I don't understand the impulse behind these things --- this is a bootstrap mechanism for a global PKI for SSH. But cold introductions to SSH hosts (that is, first connections to hosts you have no business or technical relationship with) virtually never happen. What problem does it solve?
When you see people advertising a coffee shop at a conference and people TOFU'ing on conference wifi then plugging in credit card numbers, the picture gets a little more clear.
raggi · · focus · HN ↗
tptacek · · focus · HN ↗
raggi · · focus · HN ↗
When I last harassed Crawshaw about this and we discussed bits, he submitted <a href="https://github.com/C2SP/C2SP/blob/main/well-known-ssh-hosts.md" rel="nofollow">https://github.com/C2SP/C2SP/blob/main/well-known-ssh-hosts....
Unfortunately neither of us has taken time (AFAIK) to go back and implement it anywhere.
tptacek · · focus · HN ↗
raggi · · focus · HN ↗
edmccard · · focus · HN ↗
raggi · · focus · HN ↗