China, GitHub and the man-in-the-middle (Greatfire)

Posted Feb 1, 2013 8:59 UTC (Fri) by job (guest, #670)
In reply to: China, GitHub and the man-in-the-middle (Greatfire) by robert_s
Parent article: China, GitHub and the man-in-the-middle (Greatfire)

Any modern OpenSSH will look up SSHFP in DNS. Provided you turn on DNSSEC (and github actually publishes this), that's as good as it gets. The root key trustees are few and very closely guarded.