On: Is your SSH password revealed when you attempt to connect to the wrong server?

[X-Istence]

What system are you thinking of? Which works with existing crypt(3) based system used on Unix?

[amluto → X-Istence]

If you are willing to tell anyone who connects your salt, you could, in principle, run a balanced PAKE using the crypt output.

You could go one step further and have the server store an augmented PAKE authenticator derived from the crypt(3) output.

[karlmdavis → X-Istence]

Here's half an answer: Kerberos.

Which SSH does support, btw.