Comment by benevol

How much of an added security risk does adding a web-based admin interface (to the usual ssh tunnel) represent?