Post #418648

Today on "How is this the state of the art!?": ssh-agent I just learned that you may get locked out of your server due to too many authentication requests because the ssh-agent protocol has zero provisions for prefiltering keys and just blindly tries everything in your database until one of them goes through. Is there a security reason why ssh can't send the host's hash to the agent to tell it what server it should return the key for? #sshAgent #ssh