News for hackers. Stuff that matters.

A comment on New startup sells coffee through SSH. Parent comment

Re:New startup sells coffee through SSH by sva_ on Wednesday May 01, 2024 @04:05PM (#40228652)
I've found myself to be much more comfortable to just define all my private keys in ~/.ssh/config on a host-by-host basis.
[ Parent | on HN ]
Re:New startup sells coffee through SSH by jmole on Wednesday May 01, 2024 @07:23PM (#40230840)
AFAIK, this doesn't solve the SSH agent problem - the problem is the agent has access to all of those keys regardless of the host you connect to.

So forwarding your SSH agent means an administrator of the system you're connected to could use any of those host keys loaded in the agent to connect to their associated machine.

[ Parent | on HN ]