Once upon a time, Kevin Fenzi <[email protected]> said: > Please see https://fedoraproject.org/wiki/Infrastructure/fedorapeople.org > For more information, including information on adding our SSH CA or > using dnssec / sshfp to verify the ssh host key of the new host.
AFAIK the default Fedora setup with systemd-resolved does not support DNSSEC for ssh using SSHFP records, and also the default SSH config doesn't have VerifyHostKeyDNS enabled (so even if ssh could get the record, with DNSSEC, it wouldn't use it). -- Chris Adams <[email protected]> -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
