6 ms·
Ssh agent forwarding is insecure. Don't use it. https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/ https://heipei.github.io/2015/02/2
by feld 9y ago
Ssh agent forwarding is insecure. Don't use it.
https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/ https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-con...
- jiqiren 9y agoThis link is full of counter arguments the author even concedes. If this is so serious why doesn't openssh team remove the feature? There is no excuse for denying mosh users existing patches/features and the above link changes nothing.
- feld 9y agoX Forwarding and TCP Forwarding is also insecure. Not everyone has the same threat model, but for the average person it's a bad idea to do agent Forwarding unless they fully understand the consequences. This doesn't mean the OpenSSH team should remove it.