OpenSSH

“Put a ControlMaster/ControlPersist entry in there and only the first tab actually authenticates”

“It was one of the most positive experiences I’ve had reporting a bug, especially for a non-security issue.”

“for my usecase it works out better anyway, as many places I frequent restrict UDP usage”

“OpenSSH has the best track record, but even it had a zero-day RCE (regreSSHion) in 2024.”

“sshd is vastly more complex, and allows literal (authorized) remote code execution”

“OpenSSH has the same functionality built-in, without any additional service”

“The `-Z` is less useful - as I almost always know exactly which and what order the public keys are”

“OpenSSH authors have spent considerable effort separating concerns, reducing privileges, process isolation”

“OpenSSH authors have spent considerable effort separating concerns, reducing privileges, process isolation, etc.”

“There's a couple of cool things coming from OpenBSD camp, most notably OpenSSH and PF.”

“generally developed with security in mind, but not necessarily consistently expecting malicious servers”

“the OpenSSH client is a tiny, with a singular purpose, contained in a small and very well-vetted codebase”

“There are a few projects that can be generally trusted with internet exposure”

“these weren't vibe-coded. And they took over and are running the entire world.”

“the OpenSSH itself that sends 100 packets on each keystroke to avoid timing attacks”

“Bash scripting around the OpenSSH binaries is pretty much the only way to go.”

“The way microsoft just shipped openssh is one of the saner things they have done.”

“That sucks, that means they will still appear in audits, they should remove them from the default.”

“Learning that "~C" exists, and what you can do with it, has supercharged my use of SSH tunnels”

“SSH certificate authentication mostly solves the “key comes from anywhere” problem by automatically expiring certificates.”

“all the post-quantum algorithms implemented by OpenSSH are "hybrids" that combine a post-quantum algorithm with a classical algorithm”

“inventions by OpenBSD team (often using Open as prefix) become standard, such as OpenSSH and PF”

“My recommendation is use OpenSSH (alternative: Wireguard, Tailscale for whole TCP/IP stack)”

“If you think their code sucks to the point people should think twice about using it, I suggest you stop using OpenSSH immediately.”

“You get authentication, encryption and synchronization out of the box with just ssh/git.”

“Debian patches defaults in OpenSSH code so it behaves differently than upstream.”

“Since the xz backdoor, OpenSSH no longer uses the sd_notify() function directly”

“Closed source app from an unknown developer versus OpenSSH is a no-brainer to me.”

“OpenSSH already uses privilege separation to limit the scope of the code which requests the kernel set the user for the process for the session”

“We all recognized the superiority of sshd's authentication and encrypted channels.”

“OpenSSH is incredibly battle-hardened and probably better than almost everything else you can run on an exposed port.”

“It is frustrating to me that we're only a ~200 line patch away from "unlimited" instead of shitty SSH transfer speeds”

“there are more sshd processes out there than tailnets and the scrutiny is on OpenSSH”

“SSH is what some of my friends successfully use to bypass the Great Firewall.”

“the SSH -J option is useful if you don't want to expose your SSH to your home public address”

“ensure “UseDNS no” in sshd_config on Ubuntu and you’ll probably experience the same fast login time.”

“upstream is extremely well audited. That's a huge benefit i don't want to loose by using fork.”

“OpenSSH is doubtless one of the most useful and stable computer programs of all time”

“This is enormously better for UI response time and things like compressed files”

“I will be using at the very least fil-c openssh (and likely much more) on every machine I run.”