Why is ssh-keys-like authentication not a thing today? It doesn't take much infrastructure to do it. We already have x.509 and friends. Also given how many users are on mobile, and how much control Android/iPhone has over the phones, it should not be hard.