Re:Show HN: Shellvault – Cloud SSH terminal accessible from ...
by 0x0 on Thursday January 10, 2019 @05:30PM
(#18878986)
> in-browser Javascript can't do SSH, presumably because it lacks the right security code.
This makes it sound like you don't exactly have any idea what you're doing, which is worrying for a provider of an ssh client.
Javascript is turing complete so there is no reason in-browser javascript couldn't fully implement the ssh protocol, you "just" might have to write or port the appropriate crypto routines to javascript. And of course, you'd need a http/websocket based tcp proxy since you won't be able to do a raw tcp connection to port 22 in a browser.
(Although I'd be extremely wary of using any non-standard ssh client / crypto library implementation - who knows what timing attacks and side channel info leaks might lurk in a less-vetted implementation than openssh)
This makes it sound like you don't exactly have any idea what you're doing, which is worrying for a provider of an ssh client.
Javascript is turing complete so there is no reason in-browser javascript couldn't fully implement the ssh protocol, you "just" might have to write or port the appropriate crypto routines to javascript. And of course, you'd need a http/websocket based tcp proxy since you won't be able to do a raw tcp connection to port 22 in a browser.
(Although I'd be extremely wary of using any non-standard ssh client / crypto library implementation - who knows what timing attacks and side channel info leaks might lurk in a less-vetted implementation than openssh)