Set VerifyHostKeyDNS to default
Set VerifyHostKeyDNS to default

VerifyHostKeyDNS=ask option displays a fingerprint from DNS that is not DNSSEC-secured.
It is likely to mistakenly trust the spoofed keys.

curipha/dotfiles