SSH gets this right -- create a host key when the server is installed, and have the client check the key and only warn&#x2F;error when it changes.  Sure, this isn&#x27;t super-secure for first time visitors to their banking website or whatever, but those websites can continue to use the current system.