Feature Suggestion - scp don't decrypt file at destination unecrypt on copy back switch

Peter Stuge stuge-openssh-unix-dev at cdy.org
Thu Apr 7 06:40:17 EST 2005


On Wed, Apr 06, 2005 at 12:40:37PM -0700, Gerard J. Cerchio wrote:
> Any comments?

There are several reasons why this is a bad idea, some political,
some security-related.

scp has a single purpose in OpenSSH; a drop-in replacement for rcp.

All new file-transfer development should go into sftp instead.

The encryption "environment" in which scp and sftp runs (provided by
ssh) works well as designed but is probably not the best choice for
encrypted disk storage.

You are of course welcome to create a custom subsystem for
maintaining and accessing encrypted storage volumes, but I doubt it
will ever be part of OpenSSH. (Like any other custom subsystem not in
the SSH specification I guess.)


//Peter




More information about the openssh-unix-dev mailing list