案例库 · 软件与 IT · 技术决策 · 1995
这条还没译成中文，下面是英文原文。
Tatu Ylonen's SSH encrypted remote login and became the standard
In 1995 Tatu Ylonen built SSH so remote logins were encrypted and authenticated; the protocol replaced telnet and became the default.
SSH Communications Security · OpenSSH · IETF
那一手
In the early 1990s, telnet, rlogin and FTP carried passwords and data in cleartext, so anyone on the path could read them.
In 1995 Finnish developer Tatu Ylonen built Secure Shell to replace them with one protocol that encrypted the whole session and authenticated the host with keys.
Ylonen gave the implementation away; OpenSSH, a free reimplementation, was bundled into every major Unix and Linux, and the protocol became the way to reach a server.
为什么管用
- It encrypted the entire session including the password, so nothing on the path could be read.
- One protocol covered remote shell, file copy and tunneling, so a team replaced several insecure tools at once.
- Ylonen gave the code away and OpenSSH made it free on every Unix, so adoption needed no purchase.
- Public-key authentication let a client trust a host's identity instead of trusting a shared password every time.
可以搬走什么
A security standard wins not by being the most advanced but by being the simplest thing that makes the unsafe default unthinkable.
后来呢
OpenSSH became the bundled default on every major Unix and Linux, and SSH is now the standard way to manage servers and to tunnel traffic; telnet, rlogin and FTP faded to legacy tools.
资料来源
- RFC 4251: The Secure Shell (SSH) Protocol Architecture
- Tatu Ylonen — inventor of the Secure Shell (SSH) protocol
发现哪里写错了？告诉我们。