For anyone running a server, here's a SSH certificate authentication tutorial. I personally think that everyone with public facing ssh should do it.