On 12/4/25 13:24, to...@tuxteam.de wrote:
So, share your wisdom with us: what makes ssh less secure than "a VPN"?
It's quite simple. If you have a VPN exposed to the internet and an ssh service then you have two attack surfaces in parallel. Breach either one and you breach the system
If you have VPN exposed and tunnel ssh through it, the attacker has to breach both elements in sequence to get into your system - assuming that ssh is the target.
The same applies to other systems tunneled in the VPN. For instance imap and submission.
The beauty of VPN of whatever flavour is that you can back it up with very tight firewall rules that make an exploit that much more difficult
