NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config



Jean-Yves Migeon <jeanyves.migeon%free.fr@localhost> wrote:
> Le 27/09/2013 13:57, Greg Troxel a écrit :
>> Jean-Yves Migeon <jeanyves.migeon%free.fr@localhost> writes:
>>
>>> +# Some NetBSD's hosts provide SSHFP records - try checking them
>>> +Host *.netbsd.org
>>> +       VerifyHostKeyDNS ask
>>
>> Not really objecting, but:
>>
>>   Why only for netbsd.org?
>
> Because I know admins@ add SSHFP records for the hosts managed by TNF.  
> For other domains... well, I am not so sure about that :)

Wait, you want to add project-domain specific config options to the OS
distributed file?

The majority of users of NetBSD will never need to connect via SSH to
any of the project's servers.

-Jan

Attachment: pgpYY6AdUjcQa.pgp
Description: PGP signature



Home | Main Index | Thread Index | Old Index