Even if a machine already has a trustworthy ssh client and you still use passwords, you have to carry your known_hosts or download it via https anyway. The pre-

Even if a machine already has a trustworthy ssh client and you still use passwords, you have to carry your known_hosts or download it via https anyway. The pre-installed ssh client would be such a high-value target for attacks that I think I'd prefer downloading a copy of mine.