Women in Technology

Hear us Roar


Article:
  Muscle Up Your Mac FTP
Subject:   SSH security
Date:   2005-03-06 02:58:08
From:   brian_s
I don't agree with the statement:



An SSL/TLS connection has more integrity, in the networking sense, because the encryption runs end to end from program to program; with SSH, data is routed in the clear on the client and server machines from separate programs to the SSH software. SSH is thus slightly less secure (but not by much).


If I am using SSH's sftp program as a client or server, where is it that any data is passed in the clear? There is not another program that SSH must talk to, it does all the work itself.


Brian
Full Threads Oldest First

Showing messages 1 through 1 of 1.

  • SSH security
    2005-03-06 07:21:10  eggboard [View]

    That's a fair case: sftp is the one example of that. I was talking more generically about SSH terminating at the computer not a program, but sftp is the exception (and terminal-based SSH, as well!).

Recommended for You
 
Sign up today to receive special discounts,
product alerts, and news from O'Reilly.
Privacy Policy >
View Sample Newsletter >