Because full local validation is provided, enable ssh validation over DNSSEC. It should would out-of-the-box for any installation, where systemd-resolved is installed. Signed-off-by: Petr Menšík <pemensik@redhat.com>
2 lines
49 B
Text
2 lines
49 B
Text
# Enable SSHFP verification
|
|
VerifyHostKeyDNS yes
|