SSHFP record


A Secure Shell fingerprint record is a type of resource record in the Domain Name System which identifies SSH keys that are associated with a host name. The acquisition of an SSHFP record needs to be secured with a mechanism such as DNSSEC for a chain of trust to be established.

Structure

; <Name>: The name of the object to which the resource record belongs
; <TTL>: Time to live. Validity of Resource Records
; <Class>: Protocol group to which the resource record belongs
; <Algorithm>: Algorithm
; <Type>: Algorithm used to hash the public key
; <Fingerprint>: Hexadecimal representation of the hash result, as text

Example

In this example, the host with the domain name host.example.com uses a DSA key with the SHA-1 fingerprint 123456789abcdef67890123456789abcdef67890.