[Dnsmasq-discuss] dnsmasq and sshfp records

Gerd Koenig koenig.bodensee at googlemail.com
Thu May 24 20:58:20 BST 2012


Hi JP,

thanks for your response. I'll work through the discussion and dive into
dnssec. Interesting topic I didn't get in touch...

br...: Gerd :...


On 24 May 2012 20:17, Jan-Piet Mens <jpmens.dns at gmail.com> wrote:

> > keys as "SSHFP-Record"s, so that I'm able to call via <<ssh
> > user at remotehost-o "VerifyHostKeyDNS=yes">> and get a result line like
> > "Matching host key
> > fingerprint found in DNS".
>
> This may or not be painful, if you're not using DNSSEC. (You may like to
> glance at a discussion, and the comments, at [1].)
>
> > Since I've nothing found, seems like dnsmasq doesn't support
> SSHFP-Records,
> > right ?!?!
>
> I don't think this is possible at the moment, but we'll have to ask
> Simon. Simon? Are you there? :-)
>
>        -JP
>
> [1]: http://jpmens.net/2011/02/18/verifyhostkeydnsmaybe/
>
>
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20120524/b5417e44/attachment.html>


More information about the Dnsmasq-discuss mailing list