3 ms·

> is SSH still a safe tool? Is there something better?

• jaibot 13y ago
  http://www.ietf.org/rfc/rfc1149.txt http://www.ietf.org/rfc/rfc1149.txt
• dmm 13y ago
  Well ssh is a fairly complex daemon with quite a few features. For example with OpenSSH you can authenticate with a preshared key and challenge response or with PAM integration, or with a regular unix password. It also supports several types of encryption. All these things are useful but requires more code. Some people would argue that a very simple daemon with fewer features might be more secure because it has less attack area. For example Colin Percival of Tarsnap created spiped which essentially replaces 'ssh -L'. It only supports shared key authentication and AES-256 and consists of only about 4000 lines. He connects to ssh through a spipe tunnel. https://www.tarsnap.com/spiped.html https://www.tarsnap.com/spiped.html
  • bdunbar 13y ago
    > Some people would argue that a very simple daemon with fewer features might be more secure because it has less attack area. If it's true for something like a web server, it ought to be true for SSH. Thanks for the link to spiped.
• Proleps 13y ago
  > Is there something better? Not using the internet is better :P
  • bdunbar 13y ago
    Yet, here we are. It has just occurred to me that I went from an employer for whom 'the internet' was just a medium over which biz was transacted to one for whom without 'the internet' would not exist at all.