Displaying 1 result from an estimated 1 matches for "unboundconfigurationfile".
2012 May 09
4
feature request: modify getrrsetbyname() to use libunbound
...pulation) aren't managing their known_hosts in a secure
or timely manner, we are keen on using SSHFP records .. but only if the
DNSSEC last mile issue can be addressed in a relatively easy way for
users.
We propose that openssh be modified as follows:
(1) introduce a new ssh_config directive: UnboundConfigurationFile
(2) modify getrrsetbyname() such that, if UnboundConfigurationFile is
set, then the unbound resolver is used; if not, then libc
(3) provide a default unbound configuration in /etc/ssh/ssh_unbound_conf
In this way, the standard mode of operation for ssh remains unchanged by
default. Users who wo...