Comment by megous
19 hours ago
Naive. There's not much that prevents you from running ssh over https. Not even traffic patterns will give you up in the age of ubiquitous websockets and/or http2 streams.
19 hours ago
Naive. There's not much that prevents you from running ssh over https. Not even traffic patterns will give you up in the age of ubiquitous websockets and/or http2 streams.
It will absolutely and trivially be detected by any decent IDS/IPS
SSH does nothing to hide it is SSH (tho "I'm just https" mode would certainly be welcome addition)
Even with corporate MITM setups? I somehow doubt it..
MITM only works if you allow trust in corporate CA on the outbound HTTPS connections. And why would you?
Its not always the case but many of MITM-ing corporate firewalls are going to immediately drop any TLS connection they can't decrypt on the basis they're coming from an unauthorised device.
No need for MITM.
DPI immediately can tell it is ssh.
Yeah, sure. By magic I guess. :)
1 reply →
"Naive”. How ironic.