News for hackers. Stuff that matters.

A comment on We need better support for SSH host certificates. Parent comment

Re:We need better support for SSH host certificates by the8472 on Monday March 27, 2023 @09:06AM (#35326193)
Agent forwarding has its own security issues, you're exposing all your credentials to the remote.

It's better to configure jump hosts in your local ssh config.

[ Parent | on HN ]
Re:We need better support for SSH host certificates by rfoo on Tuesday March 28, 2023 @05:42AM (#35338033)
There's SSH agent restriction now.

[1] https://www.openssh.com/agent-restrict.html

[ Parent | on HN ]