Their TLS configuration is very strict. Only TLS 1.2 with only ECDHE + ChaCha20 or AES-GCM cipher suites. A lot of clients can't talk to it (including IE 11 on

Their TLS configuration is very strict. Only TLS 1.2 with only ECDHE + ChaCha20 or AES-GCM cipher suites. A lot of clients can't talk to it (including IE 11 on Windows 7 and 8), so it makes sense that they still offer non-encrypted connections: https://www.ssllabs.com/ssltest/analyze.html?d=openssh.com https://www.ssllabs.com/ssltest/analyze.html?d=openssh.com.