The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
If i ssh to my remote OpenWrt router ["via DynDNS"] I get the message @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ Ok, i delete the old line in ~/.ssh/known_hosts, add the new one ...