> If your developers are sloppy about security does that not create a lot of other problems too? Yes, but: devs can be sloppy about ssh key security and better

> If your developers are sloppy about security does that not create a lot of other problems too? Yes, but: devs can be sloppy about ssh key security and better (yet still imperfect) at other things. Also, it's worth continually making improvements in some areas even if we can't fix everything. Which is good. We'll never be able to fix everything. I wish certificate signed host keys were easier to roll out and maintain. That's a marked improvement, even if it has its own flaws.