5 ms·
Why are we not all using sshfp records? They seem quite useful even without dnssec. Or is the lack of dnssec the only reason they’re not/little used?
by smartbit 5y ago
Why are we not all using
sshfp
records? They seem quite useful even without dnssec. Or is the lack of dnssec the only reason they’re not/little used?
- tptacek 5y agoBecause SSH certificates are a more powerful solution to the problem, work effectively in both directions, support short-lived keys linked to MFA, and are supported by a lot of tooling that SSHFP doesn't have. SSHFP is dead.