ssh config: add HashKnownHosts

This commit is contained in:
Aminda Suomalainen 2015-08-30 17:11:04 +03:00
parent 898b30cccc
commit a87af2c43c

View File

@ -2,6 +2,11 @@
# access, but they should require SSH key authentication anyway. # access, but they should require SSH key authentication anyway.
Host * Host *
# Ensure KnownHosts are unreadable if leaked.
# While you might be reading this file from GitHub, I haven't
# specified all hosts here.
HashKnownHosts yes
# Verify SSHFP records. In case DNSSEC is used this skips the # Verify SSHFP records. In case DNSSEC is used this skips the
# question on whether you trust the fingerprint or not. # question on whether you trust the fingerprint or not.
VerifyHostKeyDNS=yes VerifyHostKeyDNS=yes