Here we go. By default, basically every distro runs SSH and has it turned on by default. SSH has a good history, security wise.
Apache is not usually installed on most machines by default, and even if it is, it certainly won't be turned on. Apache has a mediocre security history, and a very real potential for zero day exploits, largely because it is so regularly used in a default configuration that requires it to be everything to everyone. Because of this, given the option of opening port 80/443 or port 22, I'd open 22. Security may be the same with both, frankly, I don't care. Webmin means that there are exploit potentials in Apache, Webmin generally, or any webmin plugin. SSH allows for an exploit in SSH. With an average machine running 5 or 10 extra webmin modules, the security footprint for webmin is huge, particularly compared to SSH. SSH allows access to anything in any way, including graphically, with little additional work, whereas webmin is quite limited in that regard. So functionally, the nod again goes to SSH. To me, this is a no brainer. SSH wins hands down. It's easier to keep secure, unlike a webmin module, the Distro will publish security updates quickly if there is anything that comes up. SSH will provide greater flexibility, and allow you to use more distro-integrated tools than Webmin will. SSH will also be easier to learn, because it is a single tool that allows access to familiar tools elsewhere. My 2 cents. Kev. _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
