3 ms·
Why is SSH open to the public internet at all, ever? Use WireGuard as VPN tunnel to your servers network, then SSH via internal IP.
by hitpointdrew 6y ago
Why is SSH open to the public internet at all, ever? Use WireGuard as VPN tunnel to your servers network, then SSH via internal IP.
- kbenson 6y agoSometimes you literally just have a server on the internet, and there's not a network to connect to with wireguard. You could connect directly to the server with wireguard, but I actually trust OpenSSH more than VPN software built into the kernel (not to mention I can update it easily without rebooting).
- joana035 6y ago> Why is SSH open to the public internet at all, ever? Wasn't SSH made for that?
- fiddlerwoaroof 6y agoYeah, I trust the OpenSSH developers a lot more than almost anyone else I can think of: if I’m going to trust any services open to the public internet, I’ll trust OpenSSH
- floatboth 6y agoWhy not avoid VPN and fully embrace the end-to-end ideology – only authenticate against services, never against networks. Abolish private networks! :P