3 ms·
It's going to take a lot more than Cloudflare adding DNSSEC support to make SSHFP records viable. Every system running an SSH client will need to run its own v
by agwa 12y ago
It's going to take a lot more than Cloudflare adding DNSSEC support to make SSHFP records viable. Every system running an SSH client will need to run its own validating resolver. If you leave validation to an upstream server you lose a significant amount of security.
- tptacek 12y agoNot to mention that if your adversary is the Global Adversary, DNSSEC is mostly useless.