Hello, please compile the ssh client with libldns, so that it starts evaluating the SSHFP records (delivered over DNSSEC). I was told a site is not going to insert SSHFP Records, as no ssh client evaluates the entries by default. Regards Дилян