Deprecation of scp protocol and improving sftp client

raf ssh at raf.org
Wed Aug 5 20:35:00 AEST 2020


On Tue, Aug 04, 2020 at 10:23:57PM -0700, Ethan Rahn <ethan.rahn at gmail.com> wrote:

> I understand that the openssh team is not interested in making changes to
> scp, but would a clarification on this being intentional behavior be
> possible? Then the novice users could account for this in their restricted
> shell setups.
> 
> Cheers,
> Ethan

I think the key message worth documenting is the fact
that scp is as powerful as ssh and that to think that
it can only transfer files is a mistake that can lead
to security issues. If users need to be limited to
transferring files only, then their access should be
restricted by the server to sftp only.

Just a thought.

cheers,
raf



More information about the openssh-unix-dev mailing list