3 ms·
Forwarding is not the default behavior, so normally you're fine. For others, if you do this: Host * ForwardAgent yes you can take this as a reminde
by Groxx 5y ago
Forwarding is not the default behavior, so normally you're fine.
For others, if you do this:
Host *
ForwardAgent yes
you can take this as a reminder that `Host *` is playing with fire, and just asking for accidents like this. Be extremely careful with `Host *` configs, especially with anything security-sensitive.
"Careful", as in "do not do it if there's literally any risk". And if you don't know for sure, consider it a risk by default. `Host *.internal` at a minimum, or whatever hostname / dns patterns are used around you, is dramatically safer and just as convenient.
- GekkePrutser 5y agoAdditionally, setting up an SSH agent that requires confirmation for every use is a great measure to prevent abuse when you do forward it by mistake.