Results 1 to 9 of 9

Thread: When does an SSH tunnel stop being encrypted....

  1. #1
    Join Date
    Jul 2013
    Beans
    56

    When does an SSH tunnel stop being encrypted....

    Say you are at work and you setup a dynamic SSH tunnel using putty to your SSH server at home and visit google.com. Does the tunnel stop being encrypted when it leaves your home network from the SSH server? Or does it stay encrypted all the way to google.com?

  2. #2
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: When does an SSH tunnel stop being encrypted....

    It is encrypted to your end point (the ssh server).
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  3. #3
    Join Date
    Jul 2013
    Beans
    56

    Re: When does an SSH tunnel stop being encrypted....

    What about dynamic tunneling?

    How does creating a local tunnel to google.com and connecting to localhost,port differ from connecting to google through a dynamic tunnel in terms of what is encrypted?

    From my understanding a dynamic tunnel is encrypted to the SSH server (and back to the client connection), while the SSH server sends clear text packets to google.com. However a localhost tunnel to google.com infers that that the connection all the way to google.com and back is encrypted.

  4. #4
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: When does an SSH tunnel stop being encrypted....

    What do you mean? The same thing would apply if you are connected to a (remote) ssh server via a local tunnel and connect to a site with localhost. A) You'll get SSL error B) The connection is only encrypted to the SSH server.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  5. #5
    Join Date
    Jul 2013
    Beans
    56

    Re: When does an SSH tunnel stop being encrypted....

    With a dynamic tunnel data travels to google.com from the SSH server unencrypted (only the tunnel to/from the SSH server from your client is encrypted).

    With a local tunnel you are encrypting the data all the way to google.com and back to the SSH server.

    Is this correct?

    The SSL error isn't an issue as one can just accept the server mismatch. But SSL isn't really necessary over a local tunnel...although I agree google.com would force it.

  6. #6
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: When does an SSH tunnel stop being encrypted....

    In either case, the encryption stops at the SSH server.

    See here:
    http://chamibuddhika.wordpress.com/2...ing-explained/
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  7. #7
    Join Date
    Jul 2013
    Beans
    56

    Re: When does an SSH tunnel stop being encrypted....

    I had seen this article again but reading it again a second time was helpful.

    If you tunnel a VNC or RDP session over the internet the session is 100% encrypted only if the SSH server is running on the same computer you RDP or VNC' into. Correct?

  8. #8
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: When does an SSH tunnel stop being encrypted....

    Quote Originally Posted by schnappi2 View Post
    I had seen this article again but reading it again a second time was helpful.

    If you tunnel a VNC or RDP session over the internet the session is 100% encrypted only if the SSH server is running on the same computer you RDP or VNC' into. Correct?
    Yes, otherwise it hits the SSH "endpoint" and goes out to whatever machine you are trying to connect to unencrypted.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  9. #9
    Join Date
    Nov 2008
    Location
    Metro Boston
    Beans
    9,798
    Distro
    Kubuntu 14.04 Trusty Tahr

    Re: When does an SSH tunnel stop being encrypted....

    Unless you are sending HTTPS requests over the tunnel, of course. But in that case, there really is no need for the tunnel.
    If you ask for help, please have the courtesy to check for responses and thank the people who helped you.

    Blog · Linode System Administration Guides · Android Apps for Ubuntu Users

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •