3 ms·
SSH has a lot of neat features that mitigate MITM, Eavesdropping, Bruteforcing etc. Where a Web-based Admin Interface should have SSL and maybe some protection
by number6 9y ago
SSH has a lot of neat features that mitigate MITM, Eavesdropping, Bruteforcing etc.
Where a Web-based Admin Interface should have SSL and maybe some protection against bruteforcing.
Plus, you get all the vulns that come with the modern web
- ynniv 9y agoHopefully they're properly defending against XSS and not going to pull a Filet-o-Firewall [https://github.com/filetofirewall/fof https://github.com/filetofirewall/fof http://www.kb.cert.org/vuls/id/361684 http://www.kb.cert.org/vuls/id/361684]
- andyrj 9y agoAdd nginx/apache with client certificate authentication in front of this and most of those concerns go away. Plus this way you don't have to worry about exposing the port but you need to distribute your client keys before hand.