[SSHD-767] Add support for verifying server keys via DNS and SSHFP records

• Type: New Feature
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.7.0
• Labels: client dns fingerprint future key-management ssh
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 29/Aug/17 06:19
• Updated: 14/Sep/17 12:07

Description

According to ssh_config(5):

VerifyHostKeyDNS - Specifies whether to verify the remote key using DNS and SSHFP resource records. If this option is set to ``yes'', the client will implicitly trust keys that match a secure fingerprint from DNS.