Skip to content

Instantly share code, notes, and snippets.

@cite
Last active December 22, 2015 23:49
Show Gist options
  • Save cite/6549387 to your computer and use it in GitHub Desktop.
Save cite/6549387 to your computer and use it in GitHub Desktop.
DANE TLSA and SSHFP
ssh -o "VerifyHostKeyDNS ask" thrassa.incertum.net
The authenticity of host 'thrassa.incertum.net (78.47.238.19)' can't be established.
RSA key fingerprint is 13:0f:0e:4e:2c:1a:ab:5d:55:55:2a:86:37:93:7e:b9.
**Matching host key fingerprint found in DNS.**
Are you sure you want to continue connecting (yes/no)?
$ dig thrassa.incertum.net sshfp +ad +short
1 1 275EF12B1816FBA59E7D5F4C73898CA8B7AA48DD
$ for i in _25 _443; do dig $i._tcp.mail.incertum.net tlsa +ad +short; done
3 1 1 BD52FE11E0F91400911340805F4BB7A55C8F1717E8ADF22AA072E37B 68336BB6
3 0 1 2895EA9D138D8963009756BDBCD563AC5EC803E5A84F481D54A4CB2D 242DA874
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment