Further to this, I’d be completely unsurprised is fully 99.9% of Linux users consider an SSH client essential. Which is why it’s installed by default.
It’s worth bearing in mind that while Linux is becoming more and more useful to Windows users, Linux is not Windows.
On 30 Jul 2025, at 13:57, Greg Wooledge <greg@wooledge.org> wrote:
On Wed, Jul 30, 2025 at 14:30:56 +0200, Oleg Goncharov wrote:
One of the things that surprised me is that Debian ships with components
like ssh and related services (such as sslh) by default,
Huh? What are you talking about?
An ssh server is *not* installed by default, and I don't even know
what "sslh" is.
which are
primarily used for server purposes. For most users who are using Debian as >> a desktop or workstation, these tools are unnecessary and can create
additional complexity and potential security concerns.
You do mean an ssh *server*, right? Not an ssh client?
I'd say there's a substantially large number of desktop systems where
an ssh server is installed for a large variety of reasons. But, again,
this is not the default. You have to select that during the installation,
or after the installation.
On 7/30/25 15:18, John Dow wrote:
Further to this, I’d be completely unsurprised is fully 99.9% of
Linux users consider an SSH client essential. Which is why it’s
installed by default.
It’s worth bearing in mind that while Linux is becoming more and
more useful to Windows users, Linux is not Windows.
Just as a data point: Windows ships these days with an SSH client as
well...
I was going to add that the default sshd installation does leave it
open to brute-force password attacks.
On Wed, 30 Jul 2025 17:28:05 +0200
Detlef Vollmann <dv@vollmann.ch> wrote:
On 7/30/25 15:18, John Dow wrote:
Further to this, I’d be completely unsurprised is fully 99.9% of
Linux users consider an SSH client essential. Which is why it’s installed by default.
It’s worth bearing in mind that while Linux is becoming more and
more useful to Windows users, Linux is not Windows.
Just as a data point: Windows ships these days with an SSH client as well...
I don't believe the OP sees the client as an issue. It is not a
daemon, it can simply be ignored, and it is not a security risk. I
always install the Telnet client, for quick and dirty
troubleshooting, but rarely use it.
Presumably the OP installed without using the Expert mode, as a
beginner might, and was not offered the choice of installing sshd. I
don't know, I made the mistake of using the non-Expert installer once,
and ended up with no networking, and I've never used it since.
Certainly the Expert mode offers the choice of sshd or not. Again I
don't recall, but I think if the task 'ssh server' is selected, it
is enabled by default and must use the normal account passwords for
security, as there is no other method enabled. It might be possible to improve on this, without making remote installation impossible.
Hi,
On Wed, Jul 30, 2025 at 06:04:13PM +0100, Joe wrote:
I was going to add that the default sshd installation does leave it
open to brute-force password attacks.
sshd is not installed by default though.
I always install the Telnet client, for quick and dirty
troubleshooting, but rarely use it.
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 546 |
| Nodes: | 16 (0 / 16) |
| Uptime: | 168:48:25 |
| Calls: | 10,385 |
| Calls today: | 2 |
| Files: | 14,057 |
| Messages: | 6,416,551 |