@navi @lunareclipse Plus in the case where it's reasonable to expect different servers, I'd say TOFU lowers security because you'd have to copy private keys around (which should never happen), not to even mention that it tends to make you avoid rotating keys.
It's why for me TOFU is only good for things like ssh.