4 ms·
> The SSH agent isn't divulging the keys. The OP is decrypting the keys from the underlying storage. But can't just any program do that as soon as you're logge
by skrause 8y ago
> The SSH agent isn't divulging the keys. The OP is decrypting the keys from the underlying storage.
But can't just any program do that as soon as you're logged in? (Since your login password basically unlocks the DP-API which is protected at rest.)
- JesseWright 8y agoA program would need the appropriate level of access (which isn't actually that high a bar), but at the end of the day the fact of the matter remains: other processes can potentially access private keys that would otherwise remain password protected.