X-Git-Url: https://asedeno.scripts.mit.edu/gitweb/?a=blobdiff_plain;f=doc%2Fpageant.but;h=f25119dd1ead10691c1583db1efe877f58c7c2e0;hb=145ecf611238c4f1e39d89d3eee40319a2c54fe8;hp=b16503182e8b532723bd52254dac1c0f0288c168;hpb=a3529a474c14ac1ede680481838e2c18ad67fc53;p=PuTTY.git diff --git a/doc/pageant.but b/doc/pageant.but index b1650318..f25119dd 100644 --- a/doc/pageant.but +++ b/doc/pageant.but @@ -260,10 +260,10 @@ as long as they want. However, the sysadmin of the server machine can always pretend to be you \e{on that machine}. So if you forward your agent to a server machine, then the sysadmin of that machine can access the forwarded -agent connection and request signatures from your private keys, and -can therefore log in to other machines as you. They can only do this -to a limited extent - when the agent forwarding disappears they lose -the ability - but using Pageant doesn't actually \e{prevent} the +agent connection and request signatures from any of your private keys, +and can therefore log in to other machines as you. They can only do +this to a limited extent - when the agent forwarding disappears they +lose the ability - but using Pageant doesn't actually \e{prevent} the sysadmin (or hackers) on the server from doing this. Therefore, if you don't trust the sysadmin of a server machine, you