You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Goldstein Lyor (JIRA)" <ji...@apache.org> on 2017/08/29 06:22:00 UTC
[jira] [Commented] (SSHD-767) Add support for verifying server keys
via DNS and SSHFP records
[ https://issues.apache.org/jira/browse/SSHD-767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16144809#comment-16144809 ]
Goldstein Lyor commented on SSHD-767:
-------------------------------------
See [RFC4255|https://tools.ietf.org/html/rfc4255] for SSHFP record specification
> Add support for verifying server keys via DNS and SSHFP records
> ---------------------------------------------------------------
>
> Key: SSHD-767
> URL: https://issues.apache.org/jira/browse/SSHD-767
> Project: MINA SSHD
> Issue Type: New Feature
> Affects Versions: 1.7.0
> Reporter: Goldstein Lyor
> Assignee: Goldstein Lyor
> Priority: Minor
> Labels: client, dns, fingerprint, key-management, ssh
>
> According to [ssh_config(5)|https://www.freebsd.org/cgi/man.cgi?ssh_config(5)]:
> {quote}
> VerifyHostKeyDNS - Specifies whether to verify the remote key using DNS and SSHFP resource records. If this option is set to ``yes'', the client will implicitly trust keys that match a secure fingerprint from DNS.
> {quote}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)