3 ms·
Good to have the option, I know I'd prefer it to distributing and maintaining a known_hosts file to a whole network. That said, I really prefer the idea of usi
by hannibalhorn 17y ago
Good to have the option, I know I'd prefer it to distributing and maintaining a known_hosts file to a whole network.
That said, I really prefer the idea of using DNSSEC with SSHFP records to CA infrastructure, but that's obviously not as feasible with VPSs / EC2 and the like. Revocation is certainly more straightforward.