https://bugzilla.mindrot.org/show_bug.cgi?id=1876
Summary: Requests to use keys held by the ssh-agent have no way
of indicating their context
Product: Portable OpenSSH
Version: 5.8p1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: ssh-agent
AssignedTo: [email protected]
ReportedBy: [email protected]
When the ssh-agent receives a request to use one of the keys it holds,
it gets no context information from the requesting system about what
the key operation is to be used for.
My own typical workflow (as a user who actively monitors and confirms
the use of my keys by the ssh-agent) is to just correlate things by
time. e.g. "i just did action X, so i expect key Y to be used right
around now, so i'll say OK".
If there was a way to communicate the context of the use to the agent,
so that the agent could relay that to the user in whatever notification
or confirmation it provides, it would seem like a Good Thing.
If there was a way to do that with some measures of cryptographic
reliability (e.g. so that a malicious client couldn't say "please make
this signature for X" when it was actually intending to be used for Y),
it would be even better. I'm not sure i understand how that could
happen, though i'd be happy to consider proposals/suggestions.
I suspect this would require at least an extension to the ssh-agent
protocol, but i'm not sure where or how that would be done.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
