Deprecation of scp protocol and improving sftp client
raf
ssh at raf.org
Wed Aug 5 20:35:00 AEST 2020
On Tue, Aug 04, 2020 at 10:23:57PM -0700, Ethan Rahn <ethan.rahn at gmail.com> wrote:
> I understand that the openssh team is not interested in making changes to
> scp, but would a clarification on this being intentional behavior be
> possible? Then the novice users could account for this in their restricted
> shell setups.
>
> Cheers,
> Ethan
I think the key message worth documenting is the fact
that scp is as powerful as ssh and that to think that
it can only transfer files is a mistake that can lead
to security issues. If users need to be limited to
transferring files only, then their access should be
restricted by the server to sftp only.
Just a thought.
cheers,
raf
More information about the openssh-unix-dev
mailing list