Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch from telnet to SSH #316

Open
fthobe opened this issue Jan 16, 2025 · 5 comments
Open

Switch from telnet to SSH #316

fthobe opened this issue Jan 16, 2025 · 5 comments

Comments

@fthobe
Copy link
Contributor

fthobe commented Jan 16, 2025

Hey,

I think it's time to switch from telnet to SSH. Is this something I can try to tackle this weekend?

Systemrescue has a very valid approach in my opinion.

@PartialVolume
Copy link
Owner

PartialVolume commented Jan 16, 2025

Not switch, telnet has it's uses in certain network configurations when the user is well aware of the security implications. Despite the fact telnetd is disabled by default. ssh would be in addition to the telnet option.

@fthobe
Copy link
Contributor Author

fthobe commented Jan 16, 2025

ok :)

Out of curiosity, which are the reasons to use telnet over SSH?

@PartialVolume
Copy link
Owner

Simplicity, it doesn't require any configuration. On a LAN with just two hosts and no WAN connection or a properly configured firewall you don't need ssh. I use ssh all the time over the internet for admin and agree ShredOS should have ssh but I wouldn't remove the telnet option as there are people like me that know when you should use it and when you absolutely shouldn't use it. But ShredOS should have ssh for those that want to login over a insecure LAN or over the internet.

@PartialVolume
Copy link
Owner

PartialVolume commented Jan 16, 2025

I'd have to double check but I believe that sshd is already included in ShredOS, it would just need configuring and maybe a kernel command line switch so you can enable/disable at boot.

There is a post where somebody has already done this but with sftp transfers of certificates, it's just undocumented at the moment.

@Firminator
Copy link

Yes we had that discussion before. You brought up the same use case which is valid.
I don't even have my wiping device wired at all :) but that's probably an exception.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants