antoniomika / sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
https://ssi.sh
MIT License
4.03k stars 308 forks source link

Verify TXT in the subdomain hierarchy #324

Open EpicEric opened 2 months ago

EpicEric commented 2 months ago

This commit adds the verify-dns-subdomains flag, false by default. If set to true, when verifying the TXT records for a host, it will also traverse up the valid subdomains of the host and check if the fingerprint exists in any of them, to authenticate the request.