SSHFP: Difference between revisions
m 1 revision |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
SSHFP records allow SSH host keys (see [http://tools.ietf.org/html/rfc4253 RFC 4253]) to be published via the Domain Name Service. An interesting benefit is that, should SSHFP lookup be the only allowed method of authenticating a host key, keys can be revoked by removing them from DNS. They are defined in [http://tools.ietf.org/html/rfc4255 RFC 4255]. It is resource record (RR) type 44 (0x2C). | SSHFP records allow SSH host keys (see [http://tools.ietf.org/html/rfc4253 RFC 4253]) to be published via the [[DNS|Domain Name Service]]. An interesting benefit is that, should SSHFP lookup be the only allowed method of authenticating a host key, keys can be revoked by removing them from DNS. They are defined in [http://tools.ietf.org/html/rfc4255 RFC 4255]. It is resource record (RR) type 44 (0x2C). | ||
<pre> 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3 | <pre> 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3 | ||
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 | ||
| Line 59: | Line 59: | ||
} | } | ||
printf(":%s:44:%s:\n", $host, $out);</pre> | printf(":%s:44:%s:\n", $host, $out);</pre> | ||
[[CATEGORY: Networking]] | |||