Still, there&#x27;s a difference between being less than 100% secure and being a totally useless feature.<p>Being able to make the statement &quot;Either you&#x27;ve been consistently MitM&#x27;ed by the same entity for the past three years, or the your little cloud-based debian box  is actually secure&quot; is a lot more useful than not tracking SSH fingerprints at all.  I certainly wish my browser would track my self-signed certs in this way.