4 ms·
I'm a big fan of the ForwardAgent option. It allows you to, based on destination, pass your SSH key forward and have it used as the private key on the destinat
by tannerburson 17y ago
I'm a big fan of the ForwardAgent option. It allows you to, based on destination, pass your SSH key forward and have it used as the private key on the destination server as well. This allows me to ssh into a remote server, but keep my key based access rights on other servers (or github).
- thristian 17y agoThe standard warning about agent-forwarding: ssh-agent works by exposing your private keys to any process running as you, or any process running with root permissions. You have to trust your laptop or workstation (if you didn't, you wouldn't be typing passwords at the keyboard) so ssh-agent is pretty safe locally, but you should be careful about extending that level of trust to other hosts. For example, I use agent-forwarding all the time at $EMPLOYER, because the same sysad is responsible for my workstation and the production systems, so every host is equally trustworthy. I might use agent-forwarding when connecting to a shell-server run by a friend, I wouldn't use it while connecting to an anonymous service like github or gitorious.