OpenSSH

FIRST-HAND READS

What people reported, in their own words. Every line links to where it was said.

• “ghost uses real OpenSSH so you can agent forward your local identities and clone as if you're on your own machine”

  POSITIVE · features · Hacker News · 2026-05-11

• “great support, surprisingly, for TPM-backed sk keys using Windows Hello and OpenSSH”

  POSITIVE · ease of use · Hacker News · 2026-04-04

• “I could not find an easy way to limit maximum certificate lifetime in openssh, except for using the AuthorizedPrincipalCommand, which feels very fragile.”

  NEGATIVE · features · Hacker News · 2026-04-03

• “OpenSSH devs refuse to fix this issue, so I have to patch it myself”

  NEGATIVE · reliability · Hacker News · 2026-03-11

• “Their pscp implementation is a better drop-in replacement than the OpenSSH solutions.”

  NEGATIVE · features · Hacker News · 2026-03-03

• “very easy in openssh 10.0+ using the command matching syntax”

  MIXED · ease of use · Hacker News · 2026-02-21

• “I like it because it's a standard Linux distribution with OpenSSH. Meaning all the things work like sftp, ssh, tunnels, and local clients”

  POSITIVE · features · Hacker News · 2026-02-18

• “I have to give `-e 'ssh -c [email protected]'` or aes128-gcm”

  MIXED · performance · Hacker News · 2026-02-05

• “the OpenSSH window overrides that value. Basically, if your bandwidth delay product is more than 2MB (e.g. 1gbps @ 17ms RTT) you're going to be application limited by OpenSSH”

  NEGATIVE · performance · Hacker News · 2025-12-16

• “OpenSSH will ask you to tap the token every time you use it: silent git pushes without you confirming it by tapping the token become impossible. Extracting the key from your machine does nothing — it's useless without the hardware token.”

  POSITIVE · features · Hacker News · 2025-12-14

• “OpenSSH's `ssh-agent` and `ssh-add` have long supported confirmation of each private key use with `ssh-askpass`”

  MIXED · features · Hacker News · 2025-11-23

• “fun to get them stuck using OpenSSH rather than depending on netfilters tarpit”

  POSITIVE · features · Hacker News · 2025-11-11

• “I will be using at the very least fil-c openssh (and likely much more) on every machine I run.”

  POSITIVE · performance · Hacker News · 2025-11-02

• “supported by OpenSSH's key based auth as the acceptable source list can be included with the public key so only specific sources can use that key for auth”

  POSITIVE · features · Hacker News · 2025-10-28

• “I can confirm it works, and is correct on my system with OpenSSH on it.”

  POSITIVE · performance · Hacker News · 2025-02-08