←back to thread

SSH3: Faster and rich secure shell using HTTP/3

(github.com)
532 points tempaccount420 | 2 comments | 27 Sep 25 14:27 UTC | HN request time: 0s | source
1. Meneth ◴[27 Sep 25 20:39 UTC] No.45399144[source]▶
An alternative way to hide your SSH server from portscanners is to put it inside a WireGuard VPN.
replies(1): >>45399232 #
2. encom ◴[27 Sep 25 20:52 UTC] No.45399232[source]▶
TFA says "port scanning attacks", but in my opinion it's not. It's barely jiggling the door knob. Securing SSH isn't hard to do properly, and port scans or connection attempts isn't something anyone needs to be concerned about whatsoever.

I am concerned however about the tedious trend of cramming absolutely everything into HTTP. DNS-over-HTTP is already very dumb, and I'm quite sure SSH-over-HTTP is not something I'm going to be interested in at all.