Jean-Yves Migeon <[email protected]> writes:

> +# Some NetBSD's hosts provide SSHFP records - try checking them
> +Host *.netbsd.org
> +       VerifyHostKeyDNS ask

Not really objecting, but:

  Why only for netbsd.org?

  Does upstream OpenSSH enable this by default?  Why or why not?

Attachment: pgpW4NztGkL_Q.pgp
Description: PGP signature

Reply via email to