Hacker News new | ask | show | jobs
by visualphoenix 1040 days ago
If the remote host is trusted, you just forward the gpg-agent over ssh to your remote host.
1 comments
pipe_connector 1040 days ago
Sorry, I think I missed something because the article doesn't mention GPG at all. How can you make a webauthn client defer to gpg-agent?
link
pxc 1040 days ago
When GPG is your ssh agent, you can use RSA or ed25519 keys stored on a smartcard (like a Yubikey) to authenticate via SSH.

It's generally preferable to use a `-sk` key type, though, by which the remote server can essentially enforce that you're using a smartcard and not a normal keypair backed by a file.

link
pipe_connector 1040 days ago
Sure, I understand how to authenticate to my remote machine with a smartcard (and already do use this setup). I'm wondering how to authenticate to resources (over HTTP) from my remote machine while using webauthn.
link
walth 1040 days ago
Just -D 8080 on your SSH connection and use the local SOCKS5 proxy to tunnel all local web traffic via remote machine.
link