3 ms·
Why is there http/3 in the middle? SSH over QUIC makes a lot of sense and was something I thought about before. The SSH protocol is designed to multiplex many
by ironhaven 3y ago
Why is there http/3 in the middle? SSH over QUIC makes a lot of sense and was something I thought about before.
The SSH protocol is designed to multiplex many “channels” over an encrypted tcp socket. Over each channel you can run things like a shell or SFTP.
It would need some engineering but you could keep the same SSH features but replace the multiplexing channels over tcp with QUIC channels over udp. Where does HTTP/3 fit in besides to add overhead?
- egberts1 3y agoDo you want to maintain a state machine for each QUIC-SSH session 1-N pairing? Or worse, M-N pairing?
- CoolGuySteve 3y agoYes. The attack surface would be much smaller.
- anticensor 3y agoWhy not have 1:1 relationship between QUIC connection IDs and open SSH sessions?
- egberts1 3y agoProfiling ... of SSH sessions at QUIC level, that's why we shouldn't do 1:1 mapping between QUIC session and SSH session.
- wmf 3y agoYou can use HTTP for authentication.
- ChoHag 3y ago[dead]