From: Simon Ruderich <simon@ruderich.org>
Date: Sat, 2 Jul 2016 10:08:01 +0000 (+0200)
Subject: ssh_config: set VerifyHostKeyDNS to ask
X-Git-Url: https://ruderich.org/simon/gitweb/?a=commitdiff_plain;h=8e71f6b905ec7ef2105d59a949d784a64ce9a574;p=config%2Fdotfiles.git

ssh_config: set VerifyHostKeyDNS to ask
---

diff --git a/ssh_config b/ssh_config
index babd153..d24dc6d 100644
--- a/ssh_config
+++ b/ssh_config
@@ -132,5 +132,6 @@ Host *
     CheckHostIP yes
 # Ask before adding any host keys to ~/.ssh/known_hosts (default).
     StrictHostKeyChecking ask
-# Don't trust host keys from DNS' SSHFP resource records (default).
-    VerifyHostKeyDNS no
+# Check host keys from DNS' SSHFP resource records but ask apply
+# StrictHostKeyChecking before trusting them.
+    VerifyHostKeyDNS ask