News for hackers. Stuff that matters.

A comment on ChatGPT Desktop forwards your SSH agent to remote machines. Parent comment

Re:ChatGPT Desktop forwards your SSH agent to remote machines by vulture916 on Monday November 09, 2026 @08:04AM (#50425034)
I know it's not open-source, but this is how I use 1Password with FIFO .envs. I'm unsure if 1P stores its SSH in the enclave, but it works the same way - whenever SSH key is accessed, it prompts for TouchID or password.

Besides the open source, any reason why I should use secretive over 1P?

- someone trying to be better about security no matter how annoyed.

[ Parent | on HN ]
Re:ChatGPT Desktop forwards your SSH agent to remote machines by petesergeant on Monday November 09, 2026 @09:43AM (#50426344)
> I'm unsure if 1P stores its SSH in the enclave

I am reasonably sure the answer is no, as evidenced by it being exportable

[ Parent | on HN ]
Re:ChatGPT Desktop forwards your SSH agent to remote machines by vulture916 on Monday November 09, 2026 @01:00PM (#50429049)
Good point, that makes sense.
[ Parent | on HN ]
Re:ChatGPT Desktop forwards your SSH agent to remote machines by littlecranky67 on Monday November 09, 2026 @04:17PM (#50432300)
macOS secure enclave supports exportable keys (see the link I posted). Still think 1P is not using it, though.
[ Parent | on HN ]
Re:ChatGPT Desktop forwards your SSH agent to remote machines by petesergeant on Tuesday November 10, 2026 @12:43AM (#50436524)
Your link is describing keys that are encrypted using a key in the secure enclave, not keys exportable from the secure enclave; the latter would defeat the whole purpose of a secure enclave.
[ Parent | on HN ]
Re:ChatGPT Desktop forwards your SSH agent to remote machines by lucasoshiro on Monday November 09, 2026 @03:14PM (#50431311)
> know it's not open-source, but this is how I use 1Password with FIFO .envs

I tried it some months ago, but it didn't work so well... The FIFO approach looks elegant, but in practice it doesn't work so well (maybe because the application was trying to read it twice?).

The best I could do with 1P was to store the env var as a password and retrieve through the CLI...

[ Parent | on HN ]