We are trying to bulletproof our server from DDoS / MIM etc.
- Clients (<5 in number) want to get some data from remote server
- Client open SSH connection to server, they can now access GET REST APIs on server.
Is this a safe architecture? SSH connection is on a non-default port
What could be the advantages of an SSL + OAuth approach?