On: Why aren't we using SSH for everything? (2015)

[roastedpeacock]

> after the recent xz backdoor, combined with the fact sshd runs as root, we probably shouldn't use SSH for everything

Independent sshd implementations with the potential of having neither issue do exist [1]

And many httpd's run as root as an easy way to bind to :80. Not strictly necessary either.

[1] https://docs.gitlab.com/ee/administration/operations/gitlab_...