From e74f19cb6f19c8613d521d809e0879f7df35ad8c Mon Sep 17 00:00:00 2001 From: Jacob Nevins Date: Fri, 25 Mar 2016 00:18:18 +0000 Subject: [PATCH] Emphasise that agent forwarding exposes all keys. (A bit.) --- doc/pageant.but | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/pageant.but b/doc/pageant.but index b1650318..f25119dd 100644 --- a/doc/pageant.but +++ b/doc/pageant.but @@ -260,10 +260,10 @@ as long as they want. However, the sysadmin of the server machine can always pretend to be you \e{on that machine}. So if you forward your agent to a server machine, then the sysadmin of that machine can access the forwarded -agent connection and request signatures from your private keys, and -can therefore log in to other machines as you. They can only do this -to a limited extent - when the agent forwarding disappears they lose -the ability - but using Pageant doesn't actually \e{prevent} the +agent connection and request signatures from any of your private keys, +and can therefore log in to other machines as you. They can only do +this to a limited extent - when the agent forwarding disappears they +lose the ability - but using Pageant doesn't actually \e{prevent} the sysadmin (or hackers) on the server from doing this. Therefore, if you don't trust the sysadmin of a server machine, you -- 2.45.2