SSH (Secure Shell) is a remote administration protocol designed for remote control of operating systems and TCP connection tunneling. The use of this protocol allows for the application of various encryption algorithms, ensuring reliable and secure operation in virtually any unprotected environment.
Using the SSH protocol is another effective method of additional security. It provides the most reliable encryption of data transmitted from the client to the server. Experienced administrators prefer this type of protocol over other less secure ones because SSH encrypts not only traffic but also passwords.
How to connect to SSH
To connect to the server via SSH in Linux, use the terminal. Just type ssh username@ip_address, confirm the connection, and enter your password. Then you’re ready to go.
What you need to know about SSH keys
Protection against hacking and separation of access levels is provided by special keys, which are much more reliable than simple passwords and have a number of advantages:
- protection against brute force attacks, because it can take a long time to find the key, for example, more than a year;
- no access to the private SSH key from an external network;
- the closed-type key is stored in a special directory that is inaccessible to ordinary users (when using UNIX-like systems).
The probability of such a key being stolen is practically zero. This can only be done if the system administrator has root privileges. In other words, if the user does not have sudo privileges, it will never be possible to intercept their passwords or traffic.
Unfortunately, the SSH protocol has its drawbacks. Attackers can gain root access to a compromised system and use your key while you are logged in to that system.