3 ms·

This is a bit off topic, but does anyone know how the mechanism that triggers the web page prompt from an ssh connection actually works? Is it some kind of alt

This is a bit off topic, but does anyone know how the mechanism that triggers the web page prompt from an ssh connection actually works? Is it some kind of alternate ssh authentication method (like password/publickey) or something entirely out-of-band coming directly from the VPN app intercepting the connection? Ever since I saw it in action with Tailscale I've always wondered how it actually works, and I guess if anyone would know they'd be on HN

fisian 4y ago
Smallstep uses ProxyCommand [0]. Not sure how Tailscale does it. 0: https://smallstep.com/docs/ssh/how-it-works https://smallstep.com/docs/ssh/how-it-works
v7n 4y ago
OOB: ".. during the SSH protocol’s authentication phase, the Tailscale SSH server already knows who the remote party is and takes over, not requiring the SSH client to provide further proof (using the SSH authentication type none)." https://tailscale.com/kb/1193/tailscale-ssh/#how-does-it-work https://tailscale.com/kb/1193/tailscale-ssh/#how-does-it-wor...