But this doesn't solve the trust problem, though; only papers over it with a false sense of security. The problem with traditional Agent Forwarding is that an

But this doesn't solve the trust problem, though; only papers over it with a false sense of security. The problem with traditional Agent Forwarding is that an intermediary may be compromised. A compromised intermediary can still fool Guardian Agent with false values for (a), (b), and (c). The only way Guardian Agent is more secure than unmodified ssh is that it's relatively unknown. Obscurity, however, isn't a defensible security perimeter.