The standard warning about agent-forwarding: ssh-agent works by exposing your private keys to any process running as you, or any process running with root permi

The standard warning about agent-forwarding: ssh-agent works by exposing your private keys to any process running as you, or any process running with root permissions. You have to trust your laptop or workstation (if you didn't, you wouldn't be typing passwords at the keyboard) so ssh-agent is pretty safe locally, but you should be careful about extending that level of trust to other hosts. For example, I use agent-forwarding all the time at $EMPLOYER, because the same sysad is responsible for my workstation and the production systems, so every host is equally trustworthy. I might use agent-forwarding when connecting to a shell-server run by a friend, I wouldn't use it while connecting to an anonymous service like github or gitorious.