bk99.de entertain the web since 1997

bk99.de
CCC · OpenSSHCurated

OpenSSH: the new stuff

Summary

leyrer presents newer OpenSSH features beyond keys, jump hosts and port forwarding and assesses their benefit for current Linux systems. A familiar standard tool deserves regular reassessment instead of a configuration that never changes. Security gains often come from consistently using new features that are already there.

Ideas

  • OpenSSH continuously develops its security methods and operational features.
  • New key types and hardware tokens reduce the risks of copyable private keys.
  • More modern configuration options simplify complex connection and trust models.
  • Old distributions hide useful features behind outdated client versions.

Recommendations

  • Compare ssh -V and the man pages on clients and servers.
  • Test new algorithms and authentication methods with a fallback access first.

References

Watch the talk

Search the Web Archive

CCC · 2026

MeshCore on 868 MHz: A decentralised radio network without the internet

Christian Stankowic and CodeSalat show how MeshCore and Meshtastic enable independent text networks and custom mesh bots with inexpensive LoRa hardware. Both projects build decentralised text networks on LoRa radio technology. Under suitable conditions, messages can cover many kilometres across several nodes.

CCC · 2026

Self-hosting email: DNS, spam filters and reputation

davd delivers a reality check on running your own mail server and explains why DNS, deliverability, spam defence and reputation are harder than the actual server software. With email, self-hosting fails more often because of social trust than because of SMTP. Decentralisation only survives if small operators can achieve deliverability in practice.

CCC · 2024

Building your own LoRa mesh network

WillCrash leads from LoRa and ESP nodes through antenna choice and site planning to a robust mesh network that communicates independently of conventional infrastructure. Independent communication comes more from a good topology than from particularly expensive hardware. Low bandwidth forces economical protocols and clear priorities.