Live data from Hacker News

SSH3: Faster and rich secure shell using HTTP/3

github.com

1–10 of 276 posts

Re: SSH3: Faster and rich secure shell using HTTP/3

#4
post #2

I was skeptical of the claim that it's faster than traditional SSH, but the README specifies that it is faster at establishing a connection, and that active connections are the same speed. That makes a lot of sense and seems like a reasonable claim to make.

It also tracks with HTTP/3 and QUIC as a whole, as one of the main "selling points" has always been reduced round trips leading to faster connection setup.

Re: SSH3: Faster and rich secure shell using HTTP/3

#6
Sure, someone paranoid about his SSH server being continuously proved by bots is going to excitedly jump to a new HTTP-SSH server that is going to be continuously proved by even more bots for HTTP exploits (easily an order of magnitude more traffic) AND whatever new fangled "HTTP-SSH" exploits appear.

Re: SSH3: Faster and rich secure shell using HTTP/3

#9
I wonder what the current plans are with the project, it's been over a year since the last release - yet alone commits or other activity on GitHub. As they've started working on the project with a paper - I guess they'll might be continuously working on other associated aspects?

Re: SSH3: Faster and rich secure shell using HTTP/3

#10
post #5

I don't know why it makes me a little sad that every application layer protocol is being absorbed into http.

It feels a little like a kludge as long as we keep calling it http. The premise makes sense -- best practices for connection initialization have become very complex and a lot of protocols need the same building blocks, so its beneficial to piggyback on the approach taken by one of the most battle tested protocols -- but it's not really hypertext we're using it to transfer anymore so it feels funny.
Post reply on HN