4 ms·
My solution to this was to make my SSH agent (Pageant) show a prompt for authorization when a request comes in, since I only use it for interactive sessions it
by r1ch 5y ago
My solution to this was to make my SSH agent (Pageant) show a prompt for authorization when a request comes in, since I only use it for interactive sessions it doesn't break anything. Seems like it would be a good feature for any agent software to have.
- Helmut10001 5y agoThis. Not proud, but Windows user here: I use KeeAgent Plugin [1] for Keepass to manage my SSH keys (Putty/Pageant). Windows Subsystem for Linux (WSL 1 and 2) connects to the Pageant SSH Agent via a Socket. When I SSH -A into machines on WSL, my KeePass DB opens and I need to confirm each key use (`Always require confirmation when client program requests to use key`). This simply means hitting enter twice, instead of once. The Keepass DB is set to stay unlocked for 6 Minutes when not in use, which is usually enough to not require entering the master key more than once during working hours. Of course, I still make sure to only use `-A` to servers I trust. [1]: https://keeagent.readthedocs.io/en/stable/ https://keeagent.readthedocs.io/en/stable/