ssh_config: Check host IP when connecting.

[config/dotfiles.git] / ssh_config

diff --git a/ssh_config b/ssh_config
index 217ae9ef7abf90de2533f81bbca70578282b70b7..9dc5150803fdb0c04ed89778233d7b85d5c4e218 100644 (file)
--- a/ssh_config
+++ b/ssh_config
@@ -39,5 +39,7 @@ Host *
 # Don't send any environment variables.
     SendEnv
 
+# Check host IP in known_hosts when connecting to detect DNS spoofing.
+    CheckHostIP yes
 # Ask before adding any host keys to ~/.ssh/known_hosts.
     StrictHostKeyChecking ask