4
votes
1answer
355 views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
8
votes
3answers
2k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
2answers
496 views

OpenWrt ssh host identification with dyndns

If i ssh to my remote OpenWrt router ["via DynDNS"] I get the message @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ Ok, i delete the old line in ~/.ssh/known_hosts, add the new one ...