News for hackers. Stuff that matters.

A comment on We need better support for SSH host certificates. Parent comment

Re:We need better support for SSH host certificates by philo23 on Monday March 27, 2023 @11:40AM (#35328109)
This is a bit off topic, but does anyone know how the mechanism that triggers the web page prompt from an ssh connection actually works? Is it some kind of alternate ssh authentication method (like password/publickey) or something entirely out-of-band coming directly from the VPN app intercepting the connection?

Ever since I saw it in action with Tailscale I've always wondered how it actually works, and I guess if anyone would know they'd be on HN

[ Parent | on HN ]
Re:We need better support for SSH host certificates by fisian on Monday March 27, 2023 @12:46PM (#35328956)
Smallstep uses ProxyCommand [0]. Not sure how Tailscale does it.

0: https://smallstep.com/docs/ssh/how-it-works

[ Parent | on HN ]
Re:We need better support for SSH host certificates by v7n on Monday March 27, 2023 @01:21PM (#35329465)
OOB: ".. during the SSH protocol’s authentication phase, the Tailscale SSH server already knows who the remote party is and takes over, not requiring the SSH client to provide further proof (using the SSH authentication type none)." https://tailscale.com/kb/1193/tailscale-ssh/#how-does-it-wor...
[ Parent | on HN ]