SSH Agent Forwarding: When Convenience Meets Risk
SSH agent forwarding lets a bastion host use your local private key without copying it, but any process on that host can also request signatures. This post shows a concrete bastion‑to‑target flow, the security trade‑offs, and a practical mitigation checklist.
ssh
putty