Re:Bypassing Authentication on SSH Bastion Hosts
by __david__ on Wednesday November 13, 2019 @01:16AM
(#21521556)
I don’t believe ssh multiplexing talks to the ssh agent. That’s the whole point, really. You just connect through an already authorized ssh connection. This eliminates the initial key handshake stuff at the beginning and makes subsequent ssh and scp connections really fast.
If I’m correct, your mitigation doesn’t affect this particular kind of attack.
If I’m correct, your mitigation doesn’t affect this particular kind of attack.