3 ms·

FTP does FXP without either server knowing credentials of the other. How does what you say "SSH" accomplish server to server transfer without exposing credenti

• jedisct1 3y ago
  scp bob@host1:/tmp/x john@host2:/tmp/ Also SSH can be configured to use different keys for each server.
  • yuubi 3y ago
    now do that without dragging all the data through your workstation.
    • aidenn0 3y ago
      Recent versions of OpenSsh don't drag the data through your workstation unless you pass "-3" (for triangle routing).
      • 8organicbits 3y ago
        Don't you still need credentials for server A to set up an SSH connection to server B? The question was to avoid that. ~scp is also deprecated on multiple platforms.~ https://www.redhat.com/en/blog/openssh-scp-deprecation-rhel-9-what-you-need-know https://www.redhat.com/en/blog/openssh-scp-deprecation-rhel-...
        • aidenn0 3y ago
          The scp protocol is deprecated, the scp command is alive and well.
• 8organicbits 3y ago
  One poor answer is SSH agent forwarding [1]. At best some SSH agents will prompt at each use, but that's questionable security. Using something like magic wormhole[2] could work. SSH to both sides and run the required commands. [1] https://matrix.org/blog/2019/05/08/post-mortem-and-remediations-for-apr-11-security-incident/#ssh-agent-forwarding-should-be-disabled https://matrix.org/blog/2019/05/08/post-mortem-and-remediati... [2] https://magic-wormhole.readthedocs.io/en/latest/welcome.html https://magic-wormhole.readthedocs.io/en/latest/welcome.html