Well that's fair enough, but I take issue more with the title of the post telling me I do "ssh wrong", because I can't be bothered to setup a CA and fuck around with certificates.
To me, setting up a CA is more effort than I would like.
To me, setting up a CA is more effort than I would like.
I agree with you, for a regular user with a single client device (or two) its not worth it.
The biggest "you're doing it wrong" I see is people who disable host key verification because their servers' IPs change constantly. Do you want MITM?! Because this is how you get MITM! Might as well use Telnet for connections.