If the client has no known_hosts files and only an RSA key. Only the ecdsa fingerprint is given to be confirmed before connection. Should administrators make sure the ecdsa fingerprint is always given out or posted even to already issued RSA key users or should the RSA fingerprint or the fingerprint matching the key to be used be shown in the ssh dialog?
(4.9 Release)