florian/tlakh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

typo s/then/when/

Browse Source
This commit is contained in:
Florian Obser 2023-01-15 08:49:31 +01:00
parent 9e53448453
commit fc9cceaa91
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
VerifyHostKeyDNS.org
View File

@ -60,7 +60,7 @@ fingerprint/. What the documentation means is that a DNS answer for
SSHFP needs to have the /Authentic Data (AD)/ flag set. The flag gets SSHFP needs to have the /Authentic Data (AD)/ flag set. The flag gets
set by a validating name-server if it can DNSSEC validate the SSHFP. set by a validating name-server if it can DNSSEC validate the SSHFP.
But then the libc stub resolver[fn:: The thingy[fn:: Thingy is a But when the libc stub resolver[fn:: The thingy[fn:: Thingy is a
technical term, don't worry about it.] that ssh uses to talk technical term, don't worry about it.] that ssh uses to talk
to the validating name-server. On OpenBSD that is [[https://man.openbsd.org/man3/asr_run.3][asr]].] gets that to the validating name-server. On OpenBSD that is [[https://man.openbsd.org/man3/asr_run.3][asr]].] gets that
answer it will strip the AD flag for security reasons. You see, it answer it will strip the AD flag for security reasons. You see, it