# francoismichel/ssh3

SSH3: faster and rich secure shell using HTTP/3, checkout our article here: https://arxiv.org/abs/2312.08396 and our Internet-Draft: https://datatracker.ietf.org/doc/draft-michel-ssh3/

Repository: https://github.com/francoismichel/ssh3
Canonical: https://ross.abutalabs.com/products/ssh3
Homepage: https://arxiv.org/abs/2312.08396
Language: Go
License: Apache-2.0
License Family: permissive
Last push: 2024-09-04T08:49:04+00:00

## Health v2 (maintenance only)
Score: 18/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 74
- inputs: {"age_days": 1037, "days_push": 728, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5012, forks 117 (observed 2026-08-28T04:09:04.654329+00:00)

## What it is
SSH3 is a research-driven reimplementation of the SSH protocol that runs remote terminal sessions over QUIC, TLS 1.3, and HTTP/3. It offers faster session establishment, HTTP-based authentication (OAuth 2.0, OpenID Connect), UDP port forwarding, and server invisibility to port scans.

## Use cases
- connect to remote servers over ssh with faster session establishment
- authenticate ssh sessions with oauth or openid connect instead of keys
- forward udp ports to a remote server
- hide an ssh server from internet port scanners
- run remote terminals over http/3 and quic

## When to choose
- you want faster ssh session setup over high-latency links
- you need modern authentication via identity providers like Google or GitHub
- you need UDP port forwarding or resistance to port scanning
- you are experimenting with next-generation remote access protocols

## When to avoid
- you need battle-tested, widely deployed ssh for production infrastructure
- your environment requires OpenSSH compatibility or existing ssh tooling
- you need guaranteed throughput improvements - only session establishment is faster
- you need a stable, standardized protocol - the spec is still an Internet-Draft

## Facets
- artifact type: cli-tool
- maturity: experimental
- function: ssh, networking, security, auth, http-client, http-server
- domain: security, networking, developer-tools
- platform: windows, go, cli
- tags: quic, http3, secure-shell, remote-terminal, port-forwarding, oauth2, openid-connect, tls1-3, command-line, linux, macos

## Member repositories
- francoismichel/ssh3 (main) score 18

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:04.654329+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:17:32.809616+00:00, confidence not recorded.
  - readme: https://github.com/francoismichel/ssh3 (fetched 2026-08-28T04:09:04.654329+00:00, sha 17f37aab3790)
  - homepage: https://arxiv.org/abs/2312.08396 (fetched 2026-08-29T08:58:22.724326+00:00, sha 4df3d84ad161)
  - site_page: https://info.arxiv.org/about/donate.html (fetched 2026-08-29T08:58:22.733448+00:00, sha cca9c3a11c56)
  - site_page: https://info.arxiv.org/about/ourmembers.html (fetched 2026-08-29T08:58:22.736895+00:00, sha 47cbc55ff1de)
  - site_page: https://info.arxiv.org/about (fetched 2026-08-29T08:58:22.738914+00:00, sha a1f16f915a9a)
  - site_page: https://info.arxiv.org/labs/index.html (fetched 2026-08-29T08:58:22.735182+00:00, sha b14a8d05a0ec)
- Data as of 2026-08-30T08:39:29.467469+00:00.
