4 ms·
Protocol complexity, number of vulnerabilities in the codebase, and for ssh there's reliability as well. (SSH tunnels multiplex connections over a single TCP c
by cperciva 5y ago
Protocol complexity, number of vulnerabilities in the codebase, and for ssh there's reliability as well. (SSH tunnels multiplex connections over a single TCP connection, whereas TLS and spiped map one TCP connection to one TCP connection.)
- eps 5y agoBut what's wrong with stunnel?
- cperciva 5y agoProtocol complexity and the number of vulnerabilities in the codebase.
- anthk 5y agoOpenSSH too?
- danielheath 5y agoIt’s not a small project...
- eps 5y agoThat's a rather gratuitous argument that applies to anything that uses TLS or OpenSSL libarary.
- cperciva 5y agoI agree that it applies to anything which uses TLS. I disagree that it's gratuitous.
- atatatat 5y agoIt's not Wireguard.