if we can, verify host keys using DNS

diff --git a/.ssh/config b/.ssh/config
index 2143794fde02828566bf211accd4f9f17d3e678b..3472318d167ad80b34305433d67732f7f7056f3b 100644 (file)
--- a/.ssh/config
+++ b/.ssh/config
@@ -3,6 +3,7 @@ Include ~/.ssh/host_specific_config
 Host *.debian.org
   IdentityFile ~/.ssh/identity_debian
   UserKnownHostsFile ~/.ssh/known_hosts_debian
+  VerifyHostKeyDNS yes
 # donarmstrong.com general configuration
 Host *.donarmstrong.com
   User don