how safe is SSH?

[bill]

I'm trying to convince a system administrator to open a network to allow the use of SSH. One of the worries that is being expressed is that if somehow the SSH were cracked then that would be a chink in their armor (or so to speak). They're kind of concerned about this, and rightly so.

I'm wondering if there are a lot of known security problems with the use of SSH.

[bakedjake]

SSH

It's relatively secure, bill. I think you'll have more problems with weak passwords more than actual security problems within the software itself.

I tend to prefer commercial SSH over OpenSSH. Just a personal preference.

Follow normal good rules for creating passwords (don't make them based upon dictionary words, and change them often), and you'll be just fine. SSH is the standard for remote system administration.

[trillianjedi]

I agree with the good passwords philosophy.

You can also set it up to work with a public/private key pair rather than a standard password for a little extra security.

TJ

[vkaryl]

Key pairs are preferred on various sites I use where SSH is the protocol of choice. None of them have ever indicated that passwords would be acceptable instead.