Publishing SSH Fingerprints in DNS
So here’s the thing about SSH: The first time you connect to a server, you have no real idea of if that’s legitimate or not, right? Well, you could compare the key fingerprint to the fingerprint that the server admin gave you and make sure they match, but nobody does that.
Well… there is a way. Using everyone’s favorite always-broken service, DNS.
Continue reading