sshsfp generates SSHFP DNS records from known_hosts files
or ssh-keyscan or TLSA/HASTLS DNS records by scanning
SSL/TLS sites.

The ssh client can use these SSHFP records if you set
"VerifyHostKeyDNS yes" in the file /etc/ssh/ssh_config
or ~/.ssh/config.