> Don't use agent forwarding unless you know you can trust the machine on the other end. On both ends. Agent hijacking can happen on client or server, with an

> Don't use agent forwarding unless you know you can trust the machine on the other end. On both ends. Agent hijacking can happen on client or server, with an attacker present. And is there any machine you can 'trust' ? That's a big ask, and I think the modern 'zero trust' is fundamentally averse to the concept.