1

If we establish the connections between two peers using two way SSL with strict configuration(TLS1.3 ,strict cipher etc..) and disabling client initiated re-negotiation. And likewise we establish the ssh connection,then which connection will be considered more secure ?

Can a two way ssl connection be as secure as ssh ?

6
  • 1
    This depends on a lot of different things... We'd need to know the exact configuration you're using for TLS as well as for SSH, as well as your precise threat model.
    – forest
    Jul 30 '19 at 5:32
  • AES256+EDH <\br> TLS1.3 only <\br> strong dhparam configured Jul 30 '19 at 5:44
  • 2
    You need to provide more detail than that, and a threat model. This still isn't nearly enough to answer such a broad question. I mean, neither TLS nor SSH are "insecure" if used correctly...
    – forest
    Jul 30 '19 at 5:46
  • I am doing some research and not done any specific threat modeling for the same. But data on the wire should be secure and threat can be considered from outside only(Assuming no internal threat). Jul 30 '19 at 6:49
  • If you force TLS 1.3 you don't have to worry about renegotiation, because it no longer exists; also 1.3 no longer allows configurable DH groups so 'dhparam configured' is ignored and useless. If you mean "AES256+EDH" as an OpenSSL cipherlist, that identifies old (<=1.2) ciphersuites that are ignored and useless in 1.3; if you mean it as a generic description, it is (1) incomplete and (2) very weird, because only OpenSSL ever used the spelling EDH (plus now all upstream-supported versions consider it obsolete). Jul 31 '19 at 6:41
3

Unless you have a specific threat model, they both provide equally secure cryptography. There are some differences in how they are used and what threats apply to them, such as TLS typically using the web PKI (Public Key Infrastructure) for authentication whereas SSH relies on TOFU (Trust-On-First-Use). The former trusts Certificate Authorities, whereas the latter relies on at an initial connection that is not compromised. So yes, TLS can be just as secure as SSH.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.