Oh SSH-it, what's my fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS. (arXiv:2208.08846v2 [cs.CR] UPDATED)

The SSH protocol is commonly used to access remote systems on the Internet,
as it provides an encrypted and authenticated channel for communication. If
upon establishing a new connection, the presented server key is unknown to the
client, the user is asked to verify the key fingerprint manually, which is
prone to errors and often blindly trusted. The SSH standard describes an
alternative to such manual key verification: using the Domain Name System (DNS)
to publish the server key information …

analysis dns fingerprint host key large scale ssh verification