[surfer7837]

Wouldn't that require a responsible body (ie a CA) to verify who they say are. Not sure that's needed for SSH

[cpach]

Yes, but it can be an internal CA. There are even FOSS products for that: https://goteleport.com/