3 ms·
Just generate a new keypair there on your bounce box then. Don't do -A because this RCE means that not only do you lose your keys, but you lose your laptop, too
by gunapologist99 3y ago
Just generate a new keypair there on your bounce box then. Don't do -A because this RCE means that not only do you lose your keys, but you lose your laptop, too!
- lxgr 3y agoWhat if you don’t trust the box enough to store a private key, though?
- themoonisachees 3y agoA box you can't trust to hold your keys could just as easily put a ssh -A command in your bashrc and use your agent to perform stuff on any servers your key is accepted on.
- pritambaral 3y agoNot if your agent supports and is configured to confirm each use. See ssh-add -c.