4 ms·
What is the effect of ForwardAgent ?
by chmike 11y ago
What is the effect of ForwardAgent ?
- arturhoo 11y agoThe host you're connecting to could be able to, force write/destroy your public repos or clone your (and your employer's) private repos given that he knows their paths, eg: github/github. I'd assume that a few companies have a */secrets repo of some sort.
- rmetzler 11y agoForwarding your keys basically. It's like giving someone you don't know a handshake AND all your keys.
- deleted 11y ago[deleted]
- lcswi 11y agopublic keys I hope?!
- rmetzler 11y agoI worded it the wrong way I guess. Edit: I don't really know how do say this short and concise, but you should only do this with servers you trust. * http://rabexc.org/posts/pitfalls-of-ssh-agents http://rabexc.org/posts/pitfalls-of-ssh-agents * http://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/ http://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-cons...
- ewindisch 11y agoNo, it gives the remote server use of your private keys during the lifetime of your connection through connection to your local agent. Yes, it's really stupid to enable AgentForwarding.
- chmike 11y agoOMG! This was an important and helpful precision. Thank you very much.