3 ms·
I don’t believe ssh multiplexing talks to the ssh agent. That’s the whole point, really. You just connect through an already authorized ssh connection. This eli
by __david__ 7y ago
I don’t believe ssh multiplexing talks to the ssh agent. That’s the whole point, really. You just connect through an already authorized ssh connection. This eliminates the initial key handshake stuff at the beginning and makes subsequent ssh and scp connections really fast.
If I’m correct, your mitigation doesn’t affect this particular kind of attack.
- Piskvorrr 7y agoYou are correct. SSH multiplexing sockets use no authentication whatsoever: the assumption is "if it's up, the user already did that before."