3 ms·
> s yet, there are no known exploitable vulnerabilities in SSH2, though information leaked by Edward Snowden in 2013 suggests the National Security Agency may b
by baldfat 9y ago
> s yet, there are no known exploitable vulnerabilities in SSH2, though information leaked by Edward Snowden in 2013 suggests the National Security Agency may be able to decrypt some SSH traffic. http://searchsecurity.techtarget.com/definition/Secure-Shell http://searchsecurity.techtarget.com/definition/Secure-Shell
I really don't understand how people continue to state wrong information about ssh. Is it because of Heart Bleed? SSH is 22 years old and is still a solid tool. The only bad thing about ssh is key management which this company is addressing.
- fidget 9y agoThere are other bad things about ssh. Tofu sucks balls and ssh users are far too comfortable with it.
- voltagex_ 9y agoHad to look it up. https://en.wikipedia.org/wiki/Trust_on_first_use https://en.wikipedia.org/wiki/Trust_on_first_use What would you replace it with?
- transitorykris 9y agoSigned keys. Here's an example of how to do it from Digital Ocean: https://www.digitalocean.com/community/tutorials/how-to-create-an-ssh-ca-to-validate-hosts-and-clients-with-ubuntu https://www.digitalocean.com/community/tutorials/how-to-crea...
- arghwhat 9y agoWell, feel free to come up with a better solution. 3rd party trust roots are way worse.
- madmulita 9y agoThe server key can be signed by a trusted authority, no need to trust on first use.