The server requests the client prove it holds the private key in a way that is bound to the session id, which is derived from the shared secret established with

The server requests the client prove it holds the private key in a way that is bound to the session id, which is derived from the shared secret established with ephemeral key exchange. https://security.stackexchange.com/questions/67242/does-public-key-auth-in-ssh-prevent-most-mitm-attacks https://security.stackexchange.com/questions/67242/does-publ...