4 ms·

Nice article, although the title is slightly off. The private key is not compromised (as described agent forwarding uses a challenge-response method) and the at

by pgraf 3y ago

Nice article, although the title is slightly off. The private key is not compromised (as described agent forwarding uses a challenge-response method) and the attacker can only initiate connections as long as the agent is being forwarded.

lathiat 3y ago
Though true in most cases you can then add your own authorized_keys entry.
- lxgr 3y ago
  That does not compromise the user’s SSH key, though, “only” (and potentially persistently as you say) one or more target servers.