[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Limiting attack surface for Debian sshd



On Sat, Apr 12, 2025 at 01:32:06PM +0800, jeremy ardley wrote:
> 
> On 12/4/25 13:24, tomas@tuxteam.de wrote:
> > So, share your wisdom with us: what makes ssh less secure than
> > "a VPN"?
> 
> 
> It's quite simple. If you have a VPN exposed to the internet and an ssh
> service then you have two attack surfaces in parallel. Breach either one and
> you breach the system

What if you don't even need the VPN (as is often the case)?

Remember: simplicity usually helps security, because the admin can
understand the system better.

Cheers
-- 
t

Attachment: signature.asc
Description: PGP signature


Reply to: