OpenSSH 6.8 released • Hacker News Board

Re: OpenSSH 6.8 released

#31

Post by ucsdrake » Wed, Mar 18, 2015, 7:56 PM UTC

themckman wrote: post #30

OpenSSH is certainly the standard amongst SSH servers, however, I'm curious if there are serious alternatives that offer something missing in OpenSSH? I know there's a patch floating around that allowed some buffer to be configurable and boosted `scp` performance, for example, but I'm curious if there are other servers that offer anything else interesting.

You might find it worth while to investigate mosh[0] as an alternative to OpenSSH.

[0] - https://mosh.mit.edu/

Re: OpenSSH 6.8 released

#32

Post by pwnna » Wed, Mar 18, 2015, 8:05 PM UTC

themckman wrote: post #30

OpenSSH is certainly the standard amongst SSH servers, however, I'm curious if there are serious alternatives that offer something missing in OpenSSH? I know there's a patch floating around that allowed some buffer to be configurable and boosted `scp` performance, for example, but I'm curious if there are other servers that offer anything else interesting.

Dropbear is a lightweight replacement for OpenSSH. It runs on things like routers (openwrt) and certain android ROMs.

Re: OpenSSH 6.8 released

#33

Post by Sanddancer » Wed, Mar 18, 2015, 8:16 PM UTC

hobarrera wrote: post #28

> [...] SSH protocol version 1.3, 1.5 [...] Do we still need these? Aren't they extremely ancient? Is there any old client that only support these protocol versions and has no security issues, or is out-of-support?

I've got a few older Dell switches that still work wonderfully, but only connect via ssh1, not ssh2. They're still useful, and setting up a management vlan isn't that hard, so replacing them is a proposition that's much more expensive than it's worth.

Re: OpenSSH 6.8 released

#34

Post by philsnow » Wed, Mar 18, 2015, 8:39 PM UTC

ucsdrake wrote: post #31

themckman wrote: post #30

OpenSSH is certainly the standard amongst SSH servers, however, I'm curious if there are serious alternatives that offer something missing in OpenSSH? I know there's a patch floating around that allowed some buffer to be configurable and boosted `scp` performance, for example, but I'm curious if there are other servers that offer anything else interesting.

You might find it worth while to investigate mosh[0] as an alternative to OpenSSH. [0] - https://mosh.mit.edu/

mosh uses openssh (or some other ssh) under the covers to perform authn + authz and start the remote mosh server (and possibly to communicate the udp port that the remote mosh server is listening on to the client mosh?)

Re: OpenSSH 6.8 released

#35

Post by agumonkey » Wed, Mar 18, 2015, 8:56 PM UTC

pwnna wrote: post #32

themckman wrote: post #30

OpenSSH is certainly the standard amongst SSH servers, however, I'm curious if there are serious alternatives that offer something missing in OpenSSH? I know there's a patch floating around that allowed some buffer to be configurable and boosted `scp` performance, for example, but I'm curious if there are other servers that offer anything else interesting.

Dropbear is a lightweight replacement for OpenSSH. It runs on things like routers (openwrt) and certain android ROMs.

Used it through an sshserver app for Android, had no troubles doing a full scp -R with it.

Re: OpenSSH 6.8 released

#36

Post by wolf550e » Wed, Mar 18, 2015, 9:01 PM UTC

I have to configure ssh servers so that putty is able to connect, so I can't follow best practices. Why don't the people working in this area help the putty project with support for the latest stuff?

Re: OpenSSH 6.8 released

#37

Post by clarry » Wed, Mar 18, 2015, 9:09 PM UTC

wolf550e wrote: post #36

I have to configure ssh servers so that putty is able to connect, so I can't follow best practices. Why don't the people working in this area help the putty project with support for the latest stuff?

Why don't the people who use and depend on putty help the project with support for the things they need?

Re: OpenSSH 6.8 released

#38

Post by marios » Wed, Mar 18, 2015, 9:20 PM UTC

hobarrera wrote: post #28

> [...] SSH protocol version 1.3, 1.5 [...] Do we still need these? Aren't they extremely ancient? Is there any old client that only support these protocol versions and has no security issues, or is out-of-support?

"Twitter poll for Unix users: do you still use SSH v.1? If so, how often? Pls. only reply if 'yes' to first question, otherwise RT welcome :)"

https://twitter.com/damienmiller/status/570409396913614849

Damien Miller is part of the OpenSSH team, so I guess they are considering cleaning that part of the code.

Re: OpenSSH 6.8 released

#39

Post by wolf550e » Wed, Mar 18, 2015, 11:35 PM UTC

clarry wrote: post #37

wolf550e wrote: post #36

I have to configure ssh servers so that putty is able to connect, so I can't follow best practices. Why don't the people working in this area help the putty project with support for the latest stuff?

Why don't the people who use and depend on putty help the project with support for the things they need?

There aren't a lot of people qualified to work on security software.

Re: OpenSSH 6.8 released

#40

Post by nuclear_eclipse » Thu, Mar 19, 2015, 12:42 AM UTC

wolf550e wrote: post #36

I have to configure ssh servers so that putty is able to connect, so I can't follow best practices. Why don't the people working in this area help the putty project with support for the latest stuff?

What best practices would prevent Putty from connecting? Afaik, I'm using most best practices on my own server, and I can connect with Putty just fine.