openssh is awesome, I'm interested in exploring some more lightweight FLOSS alternatives to use for connecting to servers I'm administrating (and using alone). Since I only need a minimal set of features (only public-private-key authentication, only a single (secure) algorithm like ed25519) and I'm aware that feature reduction is often equivalent to a reduction in attack surface, I was thinking about using something like
Therefore I'd like to ask the community if currently (2020-10):
- it is recommended to use one of the alternatives to
- if yes: which one is preferred and why, and
- if no: why this is (not) the case.
Also I'd like to know if it is advisable from a security point of view to use
tinysshd in conjunction with
tcpserver since it allows it to be run as non-root-user but needs to leave the host keys inside
/etc/tinysshd/sshkeys.d readable to the user.
In addition I'd appreciate any recommendation on other alternatives except