3 ms·
If sshd is behind wireguard, it's defense in depth. The probability of an attacker targeting you having an exploit for both at the same time will be lower that
by bux93 3y ago
If sshd is behind wireguard, it's defense in depth.
The probability of an attacker targeting you having an exploit for both at the same time will be lower that having an exploit for either.
- pepoluan 3y agoOn the other hand, if the WireGuard implementation has a vulnerability, the attacker does not need to attack SSH at all and simply punch through WireGuard to have kernel-level access to the system. It's not defense-in-depth; it's a security chain : only as strong as its weakest link.