[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DNSSEC working but SSHFP reported as insecure



On Sat, 2022-12-03 at 09:19 -0700, Casey Deccio wrote:
> ssh -o VerifyHostKeyDNS=yes main.homebox.world

Yes, this is the default option in my ssh/config file.

I tried on the command line as well, but same result:

> ssh -o VerifyHostKeyDNS=yes main.homebox.world
> The authenticity of host 'main.homebox.world (78.141.231.71)' can't
> be established.
> ECDSA key fingerprint is
> SHA256:T23Vm3xnHp/jJlBXrvdrxEiu91pPzjVRPBfGLpu5yPY.
> Matching host key fingerprint found in DNS.
> Are you sure you want to continue connecting (yes/no/[fingerprint])?
> ^C


Reply to: