3 ms·
> Many experts don't trust OpenBSD's security implementation... Does this distrust go to the extent where confronted with a public Internet-facing, stock OpenB
by yourapostasy 2y ago
> Many experts don't trust OpenBSD's security implementation...
Does this distrust go to the extent where confronted with a public Internet-facing, stock OpenBSD with a TLS-secured SSH connection, and a GSA hardened RHEL 8 [1] with a similar SSH configuration, they’ll pick the RHEL instance?
[1] https://github.com/GSA/ansible-os-rhel8 https://github.com/GSA/ansible-os-rhel8
- lmm 2y agoMany experts will pick RHEL over OpenBSD yes. It's impossible to isolate a single reason; generally you want a server to do something. (I guess if you're talking about SSH only then maybe you want it as a bastion host? In my experience people will generally use the same OS as their other servers though; the risk of misconfiguring an unfamiliar operating system outweighs any security improvement from picking one or the other)
- ruthmarx 2y agoRHEL has put a lot of work into their SELinux policy. Without a doubt it's more secure than OpenBSD. If both OSes had a remote root hole, on OpenBSD you would have carte blanche to do whatever, on the RHEL system you would be able to do very little.