That's also solved with host CA. You can rotate the host keys, add new machines/...

megous on March 27, 2023 | parent | context | favorite | on: We need better support for SSH host certificates

That's also solved with host CA. You can rotate the host keys, add new machines/keys however you want, and all that matters is whether the host keys are signed with a trusted CA, when you setup automation to trust that CA.

AtNightWeCode on March 27, 2023 [–]

Yes, that would work.