Mastodawn

nixCraft 🐧Sep 27, 2025

SSH3 is a new, faster SSH protocol built on top of HTTP/3 (QUIC + TLS 1.3). It offers several key advantages over classic SSH such as: Faster session setup, Supports modern authentication methods like OAuth 2.0 and OpenID Connect, alongside traditional methods, enhanced security by being invisible to port scanning attacks, and more.

https://github.com/francoismichel/ssh3

GitHub - francoismichel/ssh3: SSH3: faster and rich secure shell using HTTP/3, checkout our article here: https://arxiv.org/abs/2312.08396 and our Internet-Draft: https://datatracker.ietf.org/doc/draft-michel-ssh3/

SSH3: faster and rich secure shell using HTTP/3, checkout our article here: https://arxiv.org/abs/2312.08396 and our Internet-Draft: https://datatracker.ietf.org/doc/draft-michel-ssh3/ - francoismi...

GitHub

Show thread

Attila Kinali Sep 27, 2025

@nixCraft While I think that ssh might need some work here and there, I do not think we need to make session setup faster. Probably in half the cases ssh is used to get an interactive shell. Whether that takes 10ms or 100ms doesn't really matter, layer 8 will still be the limiting element. As for scripts running stuff on remote machines. There it might be useful. But even then, I don't think that many people are limited by the time needed to setup a connection.

Show thread

Lasse Leegaard

@attilakinali @nixCraft besides, it is pretty easy to tweak (disable what you do bot use) ciphers, protocols, features, etc. to make proper ssh go faster.