1 sshfp is a small utility that generates RFC4255 SSHFP DNS records
2 based on the public keys stored in a known_hosts file or obtained by
3 using ssh-keyscan. If the nameserver of the domain allows zone
4 tranfers (AXFR), an entire domain can be processed for all its A
5 records. These can then be easily added to a zone, and then secured