On: Why aren’t we using SSH for everything?

[ibotty]

That's deprecated though and afaik, that's only the client-side authentication, not the server-side. That still relies on CAs, with all the disadvantages.