Agent forwarding is discouraged by the OpenSSH crew. Yet, it's commonly used because of the convenience it affords. "Agent forwarding should be enabled with ca

Agent forwarding is discouraged by the OpenSSH crew. Yet, it's commonly used because of the convenience it affords. "Agent forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the agent's UNIX-domain socket) can access the local agent through the forwarded connection." https://man.openbsd.org/ssh.1 https://man.openbsd.org/ssh.1 Glad the vulnerability got fixed.