[Samba] How secure is SMB3 over internet?

[jmqaodmthr1acosyg at tutanota.com]

Thanks for the reply. I was checking this with several IT professionals and the consensus was that it should never be exposed over the internet (even SMB3.0) and they all recommended to use it over SSH or VPN. A couple of people said there are more security professionals venting/using/supporting SSH which is why they recommend using that.
I was just wondering, would this just be the leftover stigma from the SMB1 and SMB2 days?

--
Securely sent with Tutanota. Claim your encrypted mailbox today!
https://tutanota.com <https://tutanota.com>

19. Oct 2018 14:17 by jra at samba.org <mailto:jra at samba.org>:


> On Fri, Oct 19, 2018 at 08:04:59PM +0200, jmqaodmthr1acosyg--- via samba wrote:
>> Hello,
>> How secure is SMB3 over Internet? I see that Microsoft Azure is doing SMB3 shares over internet so they seem to think it's secure.
>> Does the SAMBA team recommend this type of scenario OR do they recommend instead running it over a SSH tunnel/VPN?
>
> So long as you're using SMB3_11 and encrypted transport
> it's secure.