Log in

No account? Create an account


Update to SSHFP tutorial

« previous entry | next entry »
25th Mar 2014 | 14:52

I have updated yesterday's article on how to get SSHFP records, DNSSEC, and VerifyHostKeyDNS=yes to work.

I have re-ordered the sections to avoid interrupting the flow of the instructions with chunks of background discussion.

I have also added a section discussing the improved usability vs weakened security of the RRSET_FORCE_EDNS0 patch in Debian and Ubuntu.

| Leave a comment | Share

Comments {0}