Sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in a known_hosts file, or public keys can be obtained by using ssh-keyscan. Serve these entries from the DNS server for your domain to provide authentication via the ssh VerifyHostKeyDNS option.

This package also includes the dane command to generate IETF DANE WG DNS records.