use the OpenPGP web of trust to verify ssh connections - View it on GitHub