$ ssh -o VerifyHostKeyDNS=yes github.com The authenticity of host 'github.com (1... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

acatton on March 24, 2023 | parent | context | favorite | on: We updated our RSA SSH host key

    $ ssh -o VerifyHostKeyDNS=yes github.com                                                                                                                                          
    The authenticity of host 'github.com (140.82.121.3)' can't be established.
    ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
    No matching host key fingerprint found in DNS.

They didn't update their DNS SSHFP records? https://en.wikipedia.org/wiki/SSHFP_record

What a security nightmare…

esclear on March 24, 2023 [–]

That is the ED25519 key's fingerprint, which shouldn't have changed. But that is moot, as GitHub doesn't publish fingerprints as SSHFP records.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact