@betabug @mathew @jonny @david_chisnall @chris_evelyn I think I'd let what Paul Vixie said speak for itself, but... gpg-agent exposes unprotected filesystem endpoints on Windows, will not let you remove loaded keys, nor does it support any of the other official OpenSSH options. It also caches keys on disk. Microsoft's ssh-agent port is slightly less bad but still pretty bad; it caches them in the per-user Registry. https://github.com/PowerShell/Win32-OpenSSH/issues/1487#issuecomment-2894953357 I was hoping this was more common knowledge by now...