3 ms·
I would personally trust SSH based on OpenSSH the most, WireGuard second, custom SSH third, TLS 4th, and then the rest.
by anderspitman 6y ago
I would personally trust SSH based on OpenSSH the most, WireGuard second, custom SSH third, TLS 4th, and then the rest.
- aborsy 6y agoInteresting! I thought Wireguard is 4K lines of code while OpenSSH is hundreds of thousands of lines of code. Thus Wireguard is more secure.
- anderspitman 6y agoIn 5-10 years WireGuard will likely be my #1, once it's had a chance to prove itself. I have no doubt it will, but you can still hide serious security issues in 4k LOC. Especially C. Also, you can still have bugs in client implementations, and especially in the process used to pass keys around. I picked OpenSSH purely because it's been around so long and had so much data tunneled through it. That said, I would still trust WG with my data. I just don't trust it more than a proven SSH implementation, yet.