主题： host-keys

• SSH known_hosts and host key verification for automation: ssh-keyscan plus an out-of-band check

  Automation that connects over SSH still needs to verify the server's host key; ssh-keyscan alone only harvests a key without proving it is genuine. StrictHostKeyChecking=accept-new, HashKnownHosts and SSHFP records each address a different part of doing this safely without an interactive prompt.

  methodology · en · reviewed · 知识截至 2026-09-24

机器可读： JSON