SSH seems to do better. Yes, there have been issues with it, but the only recent issue wasn't that bad (see http://www.cpni.gov.uk/docs/vulnerability_advisory_s

SSH seems to do better. Yes, there have been issues with it, but the only recent issue wasn't that bad (see http://www.cpni.gov.uk/docs/vulnerability_advisory_ssh.txt http://www.cpni.gov.uk/docs/vulnerability_advisory_ssh.txt). I'm discounting the Debian fiasco here, which started in OpenSSL anyway. And SSH is not a toy case: it's widely deployed and rather complex. For the common use case, though, lazy CAs are much more dangerous than cryptographic flaws.