dnssec-trigger/ssh_config.conf
Petr Menšík 0d30adfa94 Enable ssh fingerprint verification by default
Because full local validation is provided, enable ssh validation over
DNSSEC. It should would out-of-the-box for any installation, where
systemd-resolved is installed.

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2020-10-13 09:32:54 +02:00

2 lines
49 B
Text

# Enable SSHFP verification
VerifyHostKeyDNS yes