Towards SSH3: how HTTP/3 improves secure shells · HackerPapers discussions

Towards SSH3: how HTTP/3 improves secure shells — HN submission

Wed, 20 Dec 2023 18:29:54 GMT

Towards SSH3: how HTTP/3 improves secure shells [pdf]

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Towards SSH3: how HTTP/3 improves secure shells — HN submission

Sun, 17 Dec 2023 18:25:57 GMT

Towards SSH3: how HTTP/3 improves secure shells [pdf]

4 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Towards SSH3: how HTTP/3 improves secure shells — mentioned by georgyo

Sat, 16 Dec 2023 16:36:10 GMT

People are being perhaps a little too over dramatic here. Yes, this is not SSHv3 as defined by a standards body. It is very much SSHv2 over HTTP/3. (Which sorta sounds like how HTTP/3 is actually HTTP/2 over QUIC) But there is lots of SSH servers and clients, such as Dropbear SSH, OpenSSH, libssh, libssh2 (which is very different from libssh which also supports sshv2), and more. So I don't blame the creators from putting SSH in the name. The code itself looks like mostly glue code to other more well established libraries. I'm not saying that they didn't introduce new flaws, just that they did…

Paper and discussion history. A mention is not an endorsement.