Support for ECDSA and SHA-2 (SHA-256) in the SSHFP record

Ondřej Surý ondrej.sury at
Fri Jul 29 03:49:41 EST 2011


I was sure I sent this to openssh at, but cannot find that email now in my Sent mailbox, so I am sending it to the developers list.

I took a liberty and wrote an I-D with accompanying patch (with contributions from Ondrej Caletka) to support ECDSA in the SSHFP DNS resource record.

The I-D is here: (and the source XML here:

The patch to vanilla 5.8 here:

Please Cc: me as I am not (and don't intend to be) subscribed to the list.  I will check the archives occasionally, but Cc: would be appreciated.

 Ondřej Surý
 vedoucí výzkumu/Head of R&D department
 CZ.NIC, z.s.p.o.    --    Laboratoře CZ.NIC
 Americka 23, 120 00 Praha 2, Czech Republic
 mailto:ondrej.sury at
 tel:+420.222745110       fax:+420.222745112

More information about the openssh-unix-dev mailing list