Why SSH is insecure for Bitbucket and Bamboo connectivity?

[Rajdeep Das]

Hi Team,

I just wanted to know why the SSH process has been termed insecure while connecting the Bitbucket server repository to a Bamboo build plan. For now, I see that's the only process to connect to the bitbucket server.

Ifs it is being replaced with HTTPS?

[Gonchik Tsymzhitov]

Hi @Rajdeep Das , 

I would say it's secure because it's secure shell

• https://www.ssh.com/ssh/protocol/

The problerm with key exchange and cipher:

• https://community.progress.com/s/article/SSH-Weak-Key-Exchanges-Ciphers-HMAC-Sunset-on-3-17-2019

https protocol has the problem situation with ciphers.