Why does SSH come with such an unsecure default configuration?
to name what I consider unsecure defaults:
- root login enabled on SSH
- SSH protocol version 1 (which is vulnerable to MIM attacks) allowed
There also is no built in mechanism to handle brute forceattacks
I can understand that interoperability and compatibility are important for a new system, but putting a server on the web with these defaults is a major security concern. If someone didn't know about these configuration options, they could put a server live that is very vulnerable to being bruteforced and be ignorant of the problem long enough for someone to gain access.
The idea of bruteforcing root on SSH has been around a long time, and there is an ever-present 'background noise' of root login attempts on any server from bots and the like. It would make sense to ship SSH with some defaults that would help mitigate this threat.
What is the reason for these unsecure defaults?