Yes it is, which is why it's a good idea. Such a good idea, in fact, that OpenSSH security in practice relies on it! It still won't stop someone who really wa

Yes it is, which is why it's a good idea. Such a good idea, in fact, that OpenSSH security in practice relies on it! It still won't stop someone who really wants to compromise you, which means that you still will need to trust CAs from time to time.