A quick test shows that the sshfp for the ed25519 key for the current
host is not published; those who configure ssh to prefer ssh-ed25519 and
VerifyHostKeyDNS will get an error about that, even after accepting the
key, just because the other keys' sshfps are published.

Please be sure to publish sshfp for all four keys when the new host
takes over.

Thanks!

-JimC
-- 
James Cloos <cl...@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6

Attachment: signature.asc
Description: PGP signature

Reply via email to