Hacker News new | ask | show | jobs
by lcswi 3978 days ago
public keys I hope?!
2 comments
ewindisch 3978 days ago
No, it gives the remote server use of your private keys during the lifetime of your connection through connection to your local agent.

Yes, it's really stupid to enable AgentForwarding.

link
chmike 3977 days ago
OMG! This was an important and helpful precision. Thank you very much.
link
rmetzler 3978 days ago
I worded it the wrong way I guess.

Edit: I don't really know how do say this short and concise, but you should only do this with servers you trust.

* http://rabexc.org/posts/pitfalls-of-ssh-agents

* http://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-cons...

link