Hacker News Reader

Wouldn't that require a responsible body (ie a CA) to verify who they say are. Not sure that's needed for SSH

Yes, but it can be an internal CA. There are even FOSS products for that: https://goteleport.com/