all repos — nixfiles @ 62e1af7c507917673ed5299478c27d341089a544

System and user configuration, managed by nix and home-manager

ssh: check SSHFP DNS entries for unknown SSH servers

Alan Pearce
commit

62e1af7c507917673ed5299478c27d341089a544

parent

09da71a814a82de08b5bd058b6bb80a948a43a02

1 file changed, 3 insertions(+), 0 deletions(-)

jump to
M user/settings/ssh.nix → user/settings/ssh.nix
@@ -10,6 +10,9 @@ controlMaster = "auto";
     controlPersist = "10m";
     hashKnownHosts = true;
     serverAliveInterval = 15;
+    extraConfig = ''
+      VerifyHostKeyDNS ask
+    '';
     includes = [
       "local.ssh_config"
     ];