> Using Yubikeys to store SSH keys requires yubikey-agent No it doesn't. Even before OpenSSH added support for U2F there were multiple ways to use yubikeys to

> Using Yubikeys to store SSH keys requires yubikey-agent No it doesn't. Even before OpenSSH added support for U2F there were multiple ways to use yubikeys to store RSA keys. You can use PIV: https://blog.habets.se/2016/01/Yubikey-4-for-SSH-with-physical-presence-proof.html https://blog.habets.se/2016/01/Yubikey-4-for-SSH-with-physic... Or gpg-agent: https://blog.habets.se/2013/02/GPG-and-SSH-with-Yubikey-NEO.html https://blog.habets.se/2013/02/GPG-and-SSH-with-Yubikey-NEO.... I use the PIV way, and it "just works" on Windows clients too: https://blog.habets.se/2018/03/Yubikey-for-SSH-on-Windows.html https://blog.habets.se/2018/03/Yubikey-for-SSH-on-Windows.ht... Also: you use agent forwarding with no touch-to-use? Yikes!