sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in a known_hosts file, or public keys can be obtained by using ssh-keyscan. Serve these entries from the DNS server for your domain to provide authentication via the ssh VerifyHostKeyDNS option.
