OpenSSH 8.7 Released With Experimental SFTP Support For SCP

[phoronix]

Phoronix: OpenSSH 8.7 Released With Experimental SFTP Support For SCP

OpenSSH 8.7 is out today as the newest feature release for this widely-used SSH server/client software...

https://www.phoronix.com/scan.php?page=news_item&px=OpenSSH-8.7

[uid313]

Nice to see some alternatives to FTP and FTPS since those protocols are awful!

I think they ought to port OpenSSH to Rust, maybe not all of it, but at least the daemon so that it may be safer against remote exploits.

[brad0]

Nice to see some alternatives to FTP and FTP since those protocols are awful!

I think they ought to port OpenSSH to Rust, maybe not all of it, but at least the daemon so that it may be safer against remote exploits.

FTP and FTP eh?

Will NEVER happen. That would destroy the portability of OpenSSH.

[uid313]

FTP and FTP eh?

Will NEVER happen. That would destroy the portability of OpenSSH.

Sorry, I typed wrong, I meant FTP and FTPS. FTPS is FTP over TLS, like HTTPS is HTTP over TLS.
FTP is a terrible protocol!
It is awful!

[kpedersen]

I think they ought to port OpenSSH to Rust, maybe not all of it, but at least the daemon so that it may be safer against remote exploits.

It seems to be the OpenSSL layer that is the most prone to security issues. It would be better that got a rewrite (Rust is fine but I think I would be happy with *any* rewrite). Rust is basically just a thin dependent layer and doesn't do much on its own. It is the dependencies it pulls in. All written in C.

So no point OpenSSH in Rust being done when it is built on top of sand and mud anyway.

[uid313]

It seems to be the OpenSSL layer that is the most prone to security issues. It would be better that got a rewrite (Rust is fine but I think I would be happy with *any* rewrite). Rust is basically just a thin dependent layer and doesn't do much on its own. It is the dependencies it pulls in. All written in C.

So no point OpenSSH in Rust being done when it is built on top of sand and mud anyway.

I think you're right. But there is also LibreSSL and BoringSSL.

[brad0]

I think you're right. But there is also LibreSSL and BoringSSL.

Definitely would NEVER happen with LibreSSL.

[kpedersen]

Definitely would NEVER happen with LibreSSL.

I do get a few chuckles when guys jump on the OpenBSD mailing lists to recommend such a thing. Certainly a guilty pleasure of mine.

[S.Pam]

I think you're right. But there is also LibreSSL and BoringSSL.

And GnuTLS

[kpedersen]

And GnuTLS

I'm quite a fan of BearSSL for my own projects. Though for work I tend to stick to OpenSSL because "its the norm innit!".