https://bugzilla.mindrot.org/show_bug.cgi?id=1937

--- Comment #2 from Alain Knaff <[email protected]> 2011-09-12 18:45:21 
EST ---
Two problems with this work-around:

1. What if Alex started a long-running script needing ssh access, and
went for a coffee?

2. The askpass prompt doesn't actually say which session requested
access to the key. So an attacker could still abuse keys not intended
for him by just timing his request right.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to