Timeline for When I use SSH tunneling, can I assume that the server does not need to be trusted?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 5 at 4:18 | comment | added | Steffen Ullrich | @Nacht: This is true. But this is also true for any other system in between which provides the necessary connectivity. Thus it is not really specific to the SSH case in my opinion. | |
| Aug 5 at 1:19 | comment | added | Nacht | If we are thinking about the "CIA" model, the confidentiality and integrity of the system are maintained, but surely the availability of the system is still at risk? | |
| Aug 4 at 15:59 | vote | accept | aaa | ||
| Aug 4 at 15:45 | comment | added | Steffen Ullrich | @aaa: correct, the host key of the final target system you trust, not the intermediate system. | |
| Aug 4 at 15:32 | comment | added | aaa | by host key you mean the key of the host I'm gonna SSH to, right? My computer key, not the intermediary server key | |
| Aug 4 at 14:36 | comment | added | Steffen Ullrich | @aaa: correct, as long as you exclude bugs in the SSH implementation (which you do) and assume that the host key is not compromised. Note thought that someone with access to the server can still do traffic analysis of the encrypted traffic (but any host in the path of the connection could do this) | |
| Aug 4 at 14:26 | comment | added | aaa | So if my target runs ˋssh -R 2222:127.0.0.1:22 user@<remote_server_ip>ˋ on a remove_server_ip, then if I connect over ssh and check public key fingerprints, then I'm ok? | |
| Aug 4 at 8:04 | history | edited | Steffen Ullrich | CC BY-SA 4.0 |
deleted 5 characters in body
|
| Aug 4 at 5:14 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |