4 ms·
Seems like you're just trading one attack surface for another. Your "port" is exposed to the internet either way, you just replaced the service which is listeni
by PhilipRoman 2y ago
Seems like you're just trading one attack surface for another. Your "port" is exposed to the internet either way, you just replaced the service which is listening to it. The question is which you trust more - sshd or VPN.
- paranoidrobot 2y agoAs mentioned, no, not necessarily. Wireguard is much harder to detect through a network scan, as it only listens on UDP and you have to pass valid credentials first.