4 ms·

>Do not SSH cross-server This doesn't make sense. You can safely setup SSH agent forwarding to ssh from server to server without storing your ssh private key a

>Do not SSH cross-server This doesn't make sense. You can safely setup SSH agent forwarding to ssh from server to server without storing your ssh private key anywhere but your local host.

sitharus 11y ago
If the server you're forwarding your agent to is compromised it can now talk to your agent. This point could also be 'assume gateway servers are compromised'.
- carlisle_ 11y ago
  If your gateway servers are compromised to this degree you have a much larger problem than your ssh agent being compromised.
- yeukhon 11y ago
  But the article suggests to use ssh-agent.