hard20 pts · first answer countslinuxsshsecurity

Agent forwarding through a bastion

Engineers use "ssh -A" to a shared bastion and then hop to servers. Why is this risky, and what is better?

A.It copies private keys to the bastion disk; use scpB.It turns off host key checks; use ssh -vC.It sends your password in clear text; use telnetD.Root on the bastion can use your agent socket; use ProxyJump (-J)

Discussion 0

Join free to post in the discussion.

Agent forwarding through a bastion

Discussion 0

Related questions