Hacker GitHub

← All repos

StanfordSNR/guardian-agent

View on GitHub ↗ ★ 461 Go

[beta] Guardian Agent: secure ssh-agent forwarding for Mosh and SSH

13 mentions on Hacker News by 9 people: 5 stories, 8 comments · first 2017-11-09 · latest 2024-08-15

Mentions per year 13 mentions · busiest year 2019 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …common, for the user agent to limit approvals to a particular repository using the techniques in https://github.com/StanfordSNR/guardian-agent . It would be nicer if GitHub would enforce granular permissions on SSH keys!) If I understand…
    comment by keithwinstein · 2022-10-18 · in Fine-grained personal access tokens for GitHub
  2. There is a tool that implements this: https://github.com/StanfordSNR/guardian-agent The problem basically is the current agent forwarding protocol doesn't have a way to reliably identify the source and remote host that can't be spoofed.…
    comment by lathiat · 2022-01-06 · in Restricting SSH Agent Keys
  3. …for Guardian Agent, which is basically "safe" ssh-agent forwarding (and works with Mosh and SSH): https://github.com/StanfordSNR/guardian-agent The basic story is that ssh-agent really just exposes a primitive of "please sign this…
    comment by keithwinstein · 2021-09-18 · in The pitfalls of using SSH-agent, or how to use an agent safely
  4. …have been involved a project to solve this while improving the whole-agent approval things also https://github.com/StanfordSNR/guardian-agent , but I couldn't get it to work which is why I tried the fork and got that working [1]…
    comment by gnyman · 2021-08-12 · in Mosh: The Mobile Shell
  5. …own Unicode tables, which has its own problems.) For ssh-agent forwarding, most people are using https://github.com/StanfordSNR/guardian-agent which is more secure than traditional agent forwarding, and works with SSH or Mosh.
    comment by keithwinstein · 2021-08-12 · in Mosh: The Mobile Shell
  6. …for this. Wanted to put in a pitch for Dima Kogan's more-secure way of doing ssh-agent forwarding: https://github.com/StanfordSNR/guardian-agent It works with SSH and Mosh. The basic idea is that before agreeing to a request, the principal…
    comment by keithwinstein · 2020-05-20 · in SSH Agent Explained
  7. https://github.com/StanfordSNR/guardian-agent
    comment by pas · 2019-04-12 · in Matrix.org hacked
  8. https://github.com/StanfordSNR/guardian-agent
    comment by pas · 2019-04-12 · in Matrix.org hacked