HN Hall of Fame Weekly email

Secure Secure Shell

stribika.github.io Books & learning Tutorials & guides Security & privacy Candidate
Screenshot of stribika.github.io captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 4 calendar years, with breakout response in 2 of them.

submissions
4
submitters
4
observed span
2015–2020
peak thread · 180 comments
478 pts
latest 20+ return · 2018-08-04
224 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

It's possible that NSA can recover keys from 1024-bit RSA/DH/DSA handshakes, but it's extraordinarily unlikely that they can do so scalably; that would be an ability that currently qualifies as space-alien technology. RC4 is terribly broken and should be disabled. But the practical attack on RC4 requires many repetitions of the same plaintext --- "many" in the millions. This is a real threat to HTTPS/TLS, but not as much to RC4. Even hypothetical improvements to Fluhrer/McGrew would still require lots…

tptacek·478-point thread·

There are some good points here, but it's a bit over the top. For example: "NIST is considered harmful". Have you seen the latest NIST SP 800-63-3 on authentication? There was a public comment phase, the whole thing is hosted on github and it has deprecated the whole "your password must contain uppercase letters, lowercase letters, numbers, special characters (but not single quotes as our database doesn't like that) and a haiku" nonsense - the only remaining recommended password restrictions…

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
705

reference only — not used in Hall rules or ranking

Total comments
203

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2015-01-06Secure Secure ShellFirst breakout · Best threadpadraic7a478180
2017-02-28Secure Secure Shell – Tips on Securing OpenSSHjj-abram10
2018-08-04Secure Secure Shell (2015)Latest 20+ point returningve22423
2020-05-05Secure Secure Shell (2015)myst20