2 ms·

This is a good idea in general. However, every version of ssh that I could test (going back to Ubuntu 8.04) uses getaddrinfo() rather than gethostbyname() and i

by beagle3 12y ago

This is a good idea in general. However, every version of ssh that I could test (going back to Ubuntu 8.04) uses getaddrinfo() rather than gethostbyname() and is therefore safe.

beagle3 12y ago
... or not necessarily safe, as people here claim that getaddrinfo() uses gethostbyname() under the covers. "UseDNS no" in your sshd_config is a good idea in general.