Caddy-SSH
Infrastructure
ssh server
SHOW HN2022
How HN took it
8 positive, 21 neutral or asking, 2 mixed, 13 critical, out of 44 comments about the project. Thread score -0.10.
Idea: 4 for, 3 againstPrivacy: 0 for, 6 againstExecution: 1 for, 0 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Impressive work and interesting design
From 1 comment
First and foremost, congratulations on bringing the project to this stage - I think it's an impressive piece of work. I am in no way qualified to trample on your parade but two…
foxtrottbravo on HN
Pluggable auth providers sound useful
From 1 comment
Pluggable auth providers for SSH sounds awesome, though I can't think of a particular use for it right now!
GordonS on HN
Objections
Built on an HTTP server, so adding SSH to Caddy seems like scope creep
From 1 comment
What's the benefit of this being built on top of Caddy, which unless I'm mistaken has historically been an HTTP(S) server? Maybe there's someone intrinsically great about how…
jon-wood on HN
Loading authorized keys from a GitHub URL gives a third party access
From 2 comments
Note that outsourcing your key list to a live GitHub URL gives Microsoft unfettered access to your box, should they (or anyone who can compel them, such as the US armed forces)…
sneak on HNFirst and foremost, congratulations on bringing the project to this stage - I think it's an impressive piece of work. I am in no way qualified to trample on your parade but two…
foxtrottbravo on HN
Password logins are less secure than key-based auth
From 2 comments
First and foremost, congratulations on bringing the project to this stage - I think it's an impressive piece of work. I am in no way qualified to trample on your parade but two…
foxtrottbravo on HNPasswords are a shared secret. I'm not sure I'd choose the word "insecure" but only because it's too black and white when the reality is more nuanced. They are clearly worse than…
tialaramex on HN
Requests
Certificate-based authentication support
From 1 comment
This looks very interesting. Is there any support (or plans) for SSH certificates? They help to manage some of the revocation and access control challenges, as well as the issues…
g_p on HN
Better key creation and management guidance for users
From 1 comment
Biggest obstacle to proper SSH usage tends to be the creation and management of people's private keys. The number of times people have to google for instructions for doing this…
elischleifer on HN
Questions
What is the benefit of building on Caddy instead of a standalone app?
From 2 comments
I'm not sure I fully understand, what's the advantage of getting Caddy involved here versus a fully standalone app? Given the name I'd at first figured it was an official Caddy…
donatj on HNWhat's the benefit of this being built on top of Caddy, which unless I'm mistaken has historically been an HTTP(S) server? Maybe there's someone intrinsically great about how…
jon-wood on HN
Why allow password auth and keys fetched from third parties?
From 1 comment
First and foremost, congratulations on bringing the project to this stage - I think it's an impressive piece of work. I am in no way qualified to trample on your parade but two…
foxtrottbravo on HN
Alternatives named
OpenSSH
From 2 comments
> The ISRG estimates ~80% of the vulnerabilities exploited in the wild are memory safety bugs. Okay, but 1. How many vulnerabilities has openssh shipped, and 2. How many of those…
yjftsjthsd-h on HNPasswords are a shared secret. I'm not sure I'd choose the word "insecure" but only because it's too black and white when the reality is more nuanced. They are clearly worse than…
tialaramex on HN
gliderlabs/ssh
From 1 comment
To be fair, this bit is borrowed/forked from github.com/gliderlabs/ssh.
m_sahaf on HN
Tailscale ssh fork
From 1 comment
That's right. Moreover, the activity no the repo has been a bit stagnant (no disrespect to the maintainers, they are likely busy with other projects or life). Other projects have…
m_sahaf on HN