Re:ChatGPT Desktop forwards your SSH agent to remote machines
by TacticalCoder on Monday November 09, 2026 @12:39PM
(#50428754)
> The agent running on a remote machine can authenticate using your local SSH credentials.
No it doesn't. I'm using and enforcing SSH U2F keys. You physically press on a Yubikey (or similar) or you don't authenticate.
As for my own Git server, it's of course over SSH and it requires pressing the Yubikey too. As a sidenote as I do it from Magit I modified Magit to add a small but obvious message stating that the Yubikey probably awaits touching (otherwise it's easy to miss / not realize).
The great thing with all these hacks and bad practices is that I believe, eventually, people are going to learn better security hygiene.
No it doesn't. I'm using and enforcing SSH U2F keys. You physically press on a Yubikey (or similar) or you don't authenticate.
As for my own Git server, it's of course over SSH and it requires pressing the Yubikey too. As a sidenote as I do it from Magit I modified Magit to add a small but obvious message stating that the Yubikey probably awaits touching (otherwise it's easy to miss / not realize).
The great thing with all these hacks and bad practices is that I believe, eventually, people are going to learn better security hygiene.