3 ms·

So after all those years of x509/asn1/openssl bugs and ca breaches we are left with... ~/.ssh/known_hosts reimplemented, poorly? :-}