4 ms·
Do not run it if you use ssh-agent! Remember agent will forward all of your ssh keys to the untrusted server.
by rkwasny 6y ago
Do not run it if you use ssh-agent!
Remember agent will forward all of your ssh keys to the untrusted server.
- ArloL 6y agoDoes this not require ForwardAgent to be enabled?
- 002445 6y agoYes it should only be a problem if ssh -A sshchat.hackclub.com is used to connect.
- ktpsns 6y agoYou mean like https://github.com/mag-.keys https://github.com/mag-.keys ? SSH public keys should not be secrets.
- rkwasny 6y agoIf you ssh into a host and use ssh-agent + `ForwardAgent Yes` - host can get your PRIVATE key.
- GauntletWizard 6y agoThey can't get your private key - But they can make use of it so long as you're connected. Definitely only enable `ForwardAgent` for hosts that you trust.
- quackduck 6y agoCode is open source! I don't look at your public keys or private keys. I hash IPs so we have IDs that can't be tracked back to the IP.
- phekunde 6y agoInstead of (just) downvoting him, why not correct him? Look at his age!
- quackduck 6y agoTell me more about how that works.