The problem is security. If you allow SSH access to the open internet, you're more open to attack.
With openvpn you can enable two-factor authentication and a lot more security. Then, sure, let a really trusted user open an SSH shell. It is inarguable that SSH and a VPN is far more secure than merely SSH or other access methods. > On 8/25/2014 8:51 AM, [email protected] wrote: >> SSH is a very BAD thing to open up to the free internet. BAD BAD BAD. >> Once in, you are in. Shell access is dangerous. > > Stop right there. > > We have been discussing securing VNC connections to X11 desktops running > on virtual framebuffer devices. In other words: full shell access. Thus, > none of your points are immediately relevant to the discussion at hand. > They might be relevant to a discussion about access to private services > other than shell access but that's a different discussion. > > -- > Rich P. > _______________________________________________ > Discuss mailing list > [email protected] > http://lists.blu.org/mailman/listinfo/discuss > _______________________________________________ Discuss mailing list [email protected] http://lists.blu.org/mailman/listinfo/discuss
