Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> 2. Don't use agent forwarding unless you know you can trust the machine on the other end.

This gets said a lot, but doesn't forcing a prompt every time the forwarded key gets used mitigate this? SSH is not like surfing on the web with traffic flowing everywhere all the time. If you did not just now run any commands that are expected to invoke SSH, you probably don't want to answer yes to that prompt.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: