4 ms·
Client -> SSH_Server == Encrypted SSH_Server -> FaceBook == Unencrypted SSH proxies are not end to end encryption. They only protect part of the path. Not sur
by 16s 16y ago
Client -> SSH_Server == Encrypted
SSH_Server -> FaceBook == Unencrypted
SSH proxies are not end to end encryption. They only protect part of the path. Not sure why this is being down voted. It's true. The tunnel is only between the client and the SSH server. The HTTP websites that you visit beyond the SSH server see your clear text packets.
- ars 16y agoSo? The problem is insecure WiFi and local networks. The network from the SSH_Server to Facebook and much larger and more secure.
- daten 16y agoThis is true but not relevant to the discussion because the attack in question depends sniffing clear-text wireless traffic at the local access point. Tunneling over SSH protects your traffic for that portion of the network (and out past your ISP as far as the remote end of the SSH tunnel). An attacker would need different tools and resources to intercept your traffic between remote hosts.