4 ms·
Yeah, exactly, only your machine and the endpoint have to be secure for your application to be secure. I frequently run something like plain HTTP, netcat and ot
by heipei 12y ago
Yeah, exactly, only your machine and the endpoint have to be secure for your application to be secure. I frequently run something like plain HTTP, netcat and other stuff over a ProxyCommand-initiated session.
- scott_karana 12y agoUm, you realize that you're still relying on the mid-point SSHD to relay TCP packets without MITMing you though, right? The only reason ProxyCommand to tunnel SSH would be safe is because your local SSH uses authentication, and you would get the freaky WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED, IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! warning. (eg known_hosts) Netcat and plain HTTP don't have an authentication layer, so if your proxy server is compromised, so is your plain traffic. EDIT: see this other reply for another source: https://news.ycombinator.com/item?id=9428518 https://news.ycombinator.com/item?id=9428518