What misconception? You essentially admit that I'm right in this comment but surround it with a bunch of other unrelated words. If you use SSH certificates, th

What misconception? You essentially admit that I'm right in this comment but surround it with a bunch of other unrelated words. If you use SSH certificates, then you have to put the SSH CA cert on each server once, and you have to give signed certs back to each client once each time you sign a cert (which can be once per client or once per connection or anywhere in between). You do not have to copy anything new to each server when you sign new client certs. Likewise if you sign host keys, you don't have to copy a new host key to your client when you add a new server. Sure, you could get the same kind of trust relationships with other tools. But SSH certificates provide them and are an advantage of SSH certificates over traditional SSH public key auth. It honestly feels like you're just dropping this thread into an LLM and asking it to write a disagreeing response.