This is nice and all, but unless you have dnssec enabled, it
could be you get redirected to a attacker host.
We also no longer mention sshfp anywhere here, so makes sense to just
drop it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Found a reference to batcave01.fedoraproject.org, which does not resolve. Immediately below it is a reference to batcave01.iad2.fedoraproject.org, which did resolve and allowed an SSH connection. Updated the first reference.
ProxyJump is better than ProxyCommand because the ssh connection is
completely encrypted to the bastion host.
Also mention that you can use ssh keys with FIDO tokens if you are only
connecting to Fedora and RHEL9+ hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This has the benefit of making `ssh user@batcave01` get resolved
to batcave01.iad2.fedoraproject.org which will make the known_hosts
@cert-authority *.iad2.fedoraproject.org configuration apply.
