3 ms·

Ummm, no. No need for even more in-between software prompting for passwords. I’m sticking with certificate+publickey SSH

• judge2020 5y ago
  The point behind all ssh-agents is to prevent any application with access to ~ being able to read your ssh key and exfiltrate it somewhere, or simply using it to drop malware on hosts listed in your ~/.bash_history. If it's in an agent and that agent requires user interaction before it performs SSH logins, you'll be made aware of the malicious activity.
  • egberts1 5y ago
    And I keep my SSH agents entirely down and disabled too for many security reason. Stick with the publickey and more so the SK certificates. Each leg of the SSH hops should have their own set of SK certificates with their own distinctive SSH options.