Miloš Milanović | Enter Secure Shell

SSH — Secure Shell — is an application layer protocol for remote access, built in 1995. Thirty years later, it runs on nearly every server in the world and hasn't gone anywhere.

A secure replacement

Before SSH, people used Telnet to connect to remote machines. Telnet sent everything in plain text — credentials included. SSH replaced it with an encrypted alternative and quickly became the go-to protocol for remote access.

Trinity and SSH

In The Matrix Reloaded (2003), Trinity hacks into a power grid using a real tool: SSHNuke, an exploit targeting a vulnerability in older versions of the SSH protocol. It's one of the few times Hollywood got hacking right — the command, the tool and the exploit were all real.

The Matrix Reloaded (2003)

Note: The other tool used in this scene, nmap, is also real. Kudos to the Wachowskis.

Passwords and keys

SSH supports password-based authentication, but key-based authentication is more secure and more convenient.

Key-based authentication relies on public key cryptography. You generate a key pair — a private key and a public key. The rule of thumb is simple: your private key stays on your machine, a copy of your public key goes on the server.

To generate a key pair, use the ssh-keygen tool:

ssh-keygen

If you manage server access through a web UI (e.g. GitHub), paste the contents of your public key file there. If the server is already running with password authentication, ssh-copy-id handles the rest:

ssh-copy-id -i ~/.ssh/id_ed25519.pub user@192.168.0.5

From this point on, no password required.

The config file

~/.ssh/config lets you define aliases for your servers:

Host            host
HostName        192.168.0.5
User            user
IdentityFile    ~/.ssh/id_ed25519

Now ssh host will act as an alias to ssh user@192.168.0.5. For developers managing multiple servers or environments, this file is essential.

Moving files

Three tools, three use cases:

SCP — simple file copy, good for one-off transfers:

scp file.txt user@server:/home/user/

SFTP — secure FTP. Interactive file transfer, useful when you need to browse the remote filesystem:

sftp user@server

rsync — the right tool for syncing directories, incremental transfers and deployments:

rsync -avz ./out/ user@server:/var/www/app/

If you're deploying static files to a server, rsync is what you want. It only transfers what changed.

Thirty years and counting

SSH is one of those rare tools that has remained essential regardless of how the industry changed around it. Whether you're managing a single VPS or a fleet of servers, understanding SSH is non-negotiable.

Not something you think about often — just something you keep using.