That's not a secure option without DNSSEC. Given that we're unlikely to see sign... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pmh on Jan 30, 2015 | parent | context | favorite | on: Signing in to websites with SSH

That's not a secure option without DNSSEC. Given that we're unlikely to see significant DNSSEC adoption, serving the fingerprint over HTTPS (or another option altogether) would be preferable.

stephenr on Jan 30, 2015 [–]

So use DNSSEC for SSHFP lookups. The Debian package for example (openssh-client) added support for DNSSEC in its lookups, almost 5 years ago (April 2010)

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact