Re:The default OpenSSH key encryption is worse than plaintext
by tptacek on Friday August 03, 2018 @07:31PM
(#17684403)
I disagree! SSH is not great! Because it doesn't need to support every browser on the Internet, new crypto percolates through the ecosystem much faster than it does in TLS. But it's still a janky protocol with dumb options, and a Noise-based no-negotiation alternative that fulfilled the same interface would indeed be super useful.
[ Parent
| on HN ]
Re:The default OpenSSH key encryption is worse than plaintext
by lvh on Friday August 03, 2018 @07:48PM
(#17684491)
I don’t think we actually disagree; I said “a lot less fucked” not “great” :) you can get real AEADs with Ed25529 in SSH easily; and some of the dumb options problems may still apply with Oxy, depending on what you’re taking about.