Re: Publishing SSH public key fingerprints bit length?

2014-10-21 Thread Christian Weisgerber
Giancarlo Razzolini: > >> I noticed OpenBSD anon CVS SSH fingerprints have the bit length > >> published with the algorithm type: > >> http://www.openbsd.org/anoncvs.html > > That seems useless. > That's not useless. SSHFP records have the algorithm type, and the > fingerprint type. But they don

Re: Publishing SSH public key fingerprints bit length?

2014-10-21 Thread Craig R. Skinner
On 2014-10-20 Mon 21:37 PM |, Christian Weisgerber wrote: > On 2014-10-20, Craig R. Skinner wrote: > > > I noticed OpenBSD anon CVS SSH fingerprints have the bit length > > published with the algorithm type: > > http://www.openbsd.org/anoncvs.html > > That seems useless. > > > Is it important t

Re: Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 19:37, Christian Weisgerber wrote: > On 2014-10-20, Craig R. Skinner wrote: > >> I noticed OpenBSD anon CVS SSH fingerprints have the bit length >> published with the algorithm type: >> http://www.openbsd.org/anoncvs.html > That seems useless. That's not useless. SSHFP records have t

Re: Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Christian Weisgerber
On 2014-10-20, Craig R. Skinner wrote: > I noticed OpenBSD anon CVS SSH fingerprints have the bit length > published with the algorithm type: > http://www.openbsd.org/anoncvs.html That seems useless. > The bit length doesn't appear in the known_hosts file. Implicitly it does. Try "ssh-keygen

Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Craig R. Skinner
Hi, I noticed OpenBSD anon CVS SSH fingerprints have the bit length published with the algorithm type: http://www.openbsd.org/anoncvs.html A couple of other popular non-OpenBSD sites omit the bit length: 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48 (RSA) ad:1c:08:a4:40:e3:6f:9c:f5:66:26:5d:4b