Remind me again

Why don't websites use public keys for authentication instead of passwords?

We could just use ssh instead of http(s)/tls/etc.
Everything would be so much safer and nicer.
In fact, just using gpg on top of http would be much better than the current system.