3 ms·
What's the point of SSL telnetd, because one could just use ssh? You still have to bring in some heavy crypto libraries (openssl) so 'telnets' isn't any more li
by yason 15y ago
What's the point of SSL telnetd, because one could just use ssh? You still have to bring in some heavy crypto libraries (openssl) so 'telnets' isn't any more lightweight solution either. The only reason I can think of is some corporate policy that dictates the use of telnet, and for some reason SSL is approved but ssh, that hacking tool, isn't.
- deleted 15y ago[deleted]
- sigil 15y agoMaybe because of the PKI features of SSL? For instance...with an SSH client, the first time you contact a new server you're asked to verify the remote host's identity. I bet most of us just blindly type 'y' at this point despite the security implications. On the other hand, with SSL, you can have the server cert signed by a CA the client trusts.
- packetslave 15y agoOpenSSH supports PKI-based authentication and server certificate signing as of 5.4. Very useful in big enterprises and higher-security environment. http://blog.habets.pp.se/2011/07/OpenSSH-certificates http://blog.habets.pp.se/2011/07/OpenSSH-certificates
- sigil 15y agoVery cool, thanks for the info.
- deleted 15y ago[deleted]
- ars 15y agoSSL telnet was created (May 2004) when SSH was not particularly popular yet.
- yason 15y agoSSH was actively replacing telnet in the late 90's already in any decent institution. At universities it was pretty much the standard. (At least on my side of the globe.)