On Wed, 12 Nov 2014, George Michaelson wrote:
I would be asking anyone who says VerifyReverseMapping on by default, and VerifyHostKeyDNS likewise, should justify their position.
VerifyHostKeyDNS is about using SSHFP records in DNS. There is a clear benefit unless you want to make a phone call every time you login to a server you were never on before. Paul _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
