Hacker News new | ask | show | jobs
by sagonar 3518 days ago
I think that from an end users point of view SSH is as simple as telnet. Sure there are ways to use ssh keys and so on, but the base operation is as simple, ssh machine instead of telnet machine.

Regarding need to download ssh, the same has been true about telnet since (at least) windows 7. (Telnet is NOT included by default in windows 7)

Warnings about server key change, is something i feel happens very rarely with a workaround described in the error message. I feel this is a very minor issue

The other ssh added complexity is optional stuff. and is something i feel made ssh better than telnet, example: You can forward X11 connection between unix machine using ssh.(Sure you use telnet and xhost/ DISPLAY et.c )

SSH-keys are also a optional feature, that are not forced on the user, but can simplify remote login.

Sure there are more complexity inside ssh and the protocol, but the simplest use of ssh is about as simple as telnet.

1 comments

Yeah, I'm not buying it. I'm an end-user of SSH and I've experienced WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED or all sorts of bizarre problems with authentication just failing for reasons that took me hours to diagnose. That, and configuring servers to reject password authentication, converting private keys between the different formats expected by different clients, the unhelpful errors like "Permission denied (publickey)." which actually means "you typed your password in wrong" but Telnet will actually tell you that your password is wrong. How many users have discovered that after upgrading SSH that their known_hosts file is now hashed?

The protocol itself is a total mess. Having implemented servers for the Telnet protocol, I can say that Telnet is a little bit of a mess, but SSH is a total nightmare by comparison.

You're right though, that if you look at a very tiny slice of SSH then it almost looks like SSH is simpler than Telnet, once you've gone through the work of generating a key pair, securing the private key, and installing the public key on your server.

And if you're going to cherry pick tiny slices, I'd rather pick the slice:

"SSH lets me communicate with a server securely, more simply than via Telnet."

By the same vein, HTTPS is "simpler" than HTTP in this regard.

Ditto for many possible BGP replacements.

That seems like wordplay, to me. Does a car make it "simpler" to travel 60 miles an hour down the freeway, compared to walking?

SSH is more complex and more secure than Telnet.