6 ms·
It doesn't address the Trust On First Use (TOFU) issue.
by markmaglana 5y ago
It doesn't address the Trust On First Use (TOFU) issue.
- franga2000 5y agoA quick and dirty way to do this is by syncing the known hosts file between all your clients. Make it writable by only the IT staff in charge of provisioning new systems and have them add the pubkeys during provisioning.
- csdvrx 5y agoAdd SSHP records to your DNS entries, and use DNSSEC or, if you can't, DoH (DNS over HTTPS)
- zdw 5y agoA SSH Certificate Authority signing host keys handles that, but requires additional setup.