[fidget]

There are other bad things about ssh. Tofu sucks balls and ssh users are far too comfortable with it.

[voltagex_]

Had to look it up. https://en.wikipedia.org/wiki/Trust_on_first_use

What would you replace it with?

[transitorykris]

Signed keys. Here's an example of how to do it from Digital Ocean: https://www.digitalocean.com/community/tutorials/how-to-crea...

[arghwhat]

Well, feel free to come up with a better solution. 3rd party trust roots are way worse.

[madmulita]

The server key can be signed by a trusted authority, no need to trust on first use.