5 ms·

You are right, I am. Now I understand the DNSSEC setup.

• xorcist 4y ago
  Known_hosts can also be put in DNSSEC, using the SSHFP DNS record. OpenSSH understands that out of the box.