I've often wondered whether tls/ssl should work more like ssh, where there's an initial leap of faith and the public key is remembered afterwards (and you get w

I've often wondered whether tls/ssl should work more like ssh, where there's an initial leap of faith and the public key is remembered afterwards (and you get warned if it changes).