d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

OpenSSH doesn't forward keys by default.

Browse Source
This commit is contained in:
dd 2001-06-16 00:32:19 +00:00
parent 6a8d5663b7
commit 935cf14795
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
share/man/man7/security.7
View File

@ -650,8 +650,9 @@ kerberos does not encrypt a session unless you use the
.Fl x
option. Ssh encrypts everything by default.
.Pp
Ssh works quite well in every respect except that it forwards encryption keys
by default. What this means is that if you have a secure workstation holding
Ssh works quite well in every respect except when it is set up to
forward encryption keys.
What this means is that if you have a secure workstation holding
keys that give you access to the rest of the system, and you ssh to an
unsecure machine, your keys becomes exposed. The actual keys themselves are
not exposed, but ssh installs a forwarding port for the duration of your