Secretive – macOS native app to store SSH keys in the Secure Enclave

Re:Secretive – macOS native app to store SSH keys in the Sec... by XMPPwocky on Saturday June 27, 2020 @07:03PM (#23665401)

To be clear, that would be a privacy issue (a malicious server could tell what keys you have), but wouldn't allow a malicious server to log in to anything else with your keys. You don't send the private key when you log in.

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by fhqghds on Sunday June 28, 2020 @12:37AM (#23666768)

Note that GP said -A -- this means the agent gets forwarded, and processes on the malicious server can ask the agent to perform authentication operations.

Touch to auth means the agent (or hardware token) asks the user to to confirm they are expecting an authentication request to come in.

This allows you to forward your agent to a host and have slightly more protection against malicious processes on the host using your key.

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by cma on Sunday June 28, 2020 @01:08AM (#23666866)

Github shouldn't ever make any use of -A should it?

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by xmodem on Sunday June 28, 2020 @02:28AM (#23667088)

Nope. But if you -A to a malicious server it could use your key to push to github.

[ Parent | on HN ]