Once upon a time, Kevin Fenzi <ke...@scrye.com> said: > Please see https://fedoraproject.org/wiki/Infrastructure/fedorapeople.org > For more information, including information on adding our SSH CA or > using dnssec / sshfp to verify the ssh host key of the new host.
AFAIK the default Fedora setup with systemd-resolved does not support DNSSEC for ssh using SSHFP records, and also the default SSH config doesn't have VerifyHostKeyDNS enabled (so even if ssh could get the record, with DNSSEC, it wouldn't use it). -- Chris Adams <li...@cmadams.net> -- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
