OpenSSH Security guidelines

#1

Post by mozilla » Tue, Feb 03, 2015, 11:35 PM UTC

OpenSSH Security guidelines
wiki.mozilla.org

Re: OpenSSH Security guidelines

#2

Post by djmdjm » Wed, Feb 04, 2015, 12:50 AM UTC

This all seems good advice for an organisation with fairly heterogenous client/server populations.

Re: OpenSSH Security guidelines

#3

Post by zobzu » Wed, Feb 04, 2015, 2:18 AM UTC

djmdjm wrote: post #2

This all seems good advice for an organisation with fairly heterogenous client/server populations.

Seems also to work if you have only cutting edge SSH (since its split by modern/intermediate) which is nice

Re: OpenSSH Security guidelines

#4

Post by anonbanker » Wed, Feb 04, 2015, 6:59 AM UTC

I set this up on my servers, and not a single Android ssh client was able to connect, or even read the keys generated on another device.

This seriously affects my confidence in the security of Android.

Re: OpenSSH Security guidelines

#5

Post by mozilla » Wed, Feb 04, 2015, 10:16 PM UTC

anonbanker wrote: post #4

I set this up on my servers, and not a single Android ssh client was able to connect, or even read the keys generated on another device. This seriously affects my confidence in the security of Android.

The intermediate setup should normally work for you, at least with some clients. Seems ok with JuiceSSH.