NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config

To: Jean-Yves Migeon <jeanyves.migeon%free.fr@localhost>
Subject: Re: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config
From: Greg Troxel <gdt%ir.bbn.com@localhost>
Date: Fri, 27 Sep 2013 07:57:46 -0400

Jean-Yves Migeon <jeanyves.migeon%free.fr@localhost> writes:

> +# Some NetBSD's hosts provide SSHFP records - try checking them
> +Host *.netbsd.org
> +       VerifyHostKeyDNS ask

Not really objecting, but:

  Why only for netbsd.org?

  Does upstream OpenSSH enable this by default?  Why or why not?

Attachment: pgpSE25jvN6Sm.pgp
Description: PGP signature

Follow-Ups:
- Re: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config
  - From: Jean-Yves Migeon

References:
- Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config
  - From: Jean-Yves Migeon

Prev by Date: Re: Few notes&questions on NetBSD building and on wedges included by default
Next by Date: Re: imap configuration
Previous by Thread: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config
Next by Thread: Re: Enabling VerifyHostKeyDNS option in /etc/ssh/ssh_config
Indexes:

Home | Main Index | Thread Index | Old Index