From 8e71f6b905ec7ef2105d59a949d784a64ce9a574 Mon Sep 17 00:00:00 2001
From: Simon Ruderich <simon@ruderich.org>
Date: Sat, 2 Jul 2016 12:08:01 +0200
Subject: [PATCH] ssh_config: set VerifyHostKeyDNS to ask

---
 ssh_config | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ssh_config b/ssh_config
index babd153..d24dc6d 100644
--- a/ssh_config
+++ b/ssh_config
@@ -132,5 +132,6 @@ Host *
     CheckHostIP yes
 # Ask before adding any host keys to ~/.ssh/known_hosts (default).
     StrictHostKeyChecking ask
-# Don't trust host keys from DNS' SSHFP resource records (default).
-    VerifyHostKeyDNS no
+# Check host keys from DNS' SSHFP resource records but ask apply
+# StrictHostKeyChecking before trusting them.
+    VerifyHostKeyDNS ask
-- 
2.43.2