Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I believe it is possible to set up ssh-agent to ask you locally if you want to respond to a challenge, listing the machine that requested it.

In either case, unless you use different passwords for every machine, ssh-agent is already a net gain.



Unfortunately it doesn't list the machine that requested it. It's only possible to tell what local process connected to the agent and login as what username will be authenticated (the packet that the agent signs contains essentially the username and hash of session secrets; notably absent is the target hostname and target's public key fingerprint).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: