Hacker News new | ask | show | jobs
by pastage 1032 days ago
Hard to do with secure enclaves. You should protect your agent on your local machine to not allow requests willy nilly if the machine you ssh through is part of the threat model. You may need to rethink wether to use agent forward at all if that is something you need to worry about.

There are alot if details in this that can go wrong. I seldom use agent forward in unknown/undesigned environments because of this.