This is actually a bad user experience problem: To generally omit the manual verification of SSH key fingerprints I am using SSHFP. With fully qualified domain names (FQDN) as the hostname for SSH connections such as [crayon-5a7ca15319b65951486250-i/] this works perfectly. However, admins are lazy and only use the hostname without the domain suffix to connect … Continue reading SSHFP: FQDN vs. Domain Search/DNS-Suffix
This is actually a bad user experience problem: To generally omit the manual verification of SSH key fingerprints I am using SSHFP. With fully qualified domain names (FQDN) as the hostname for SSH connections such as [crayon-5a7ca15319b65951486250-i/] this works perfectly. However, admins are lazy and only use the hostname without the domain suffix to connect … Continue reading SSHFP: FQDN vs. Domain Search/DNS-Suffix