2026-04-16 16:23 UTC
@betabug @mathew @jonny @david_chisnall @chris_evelyn I think I'd let what Paul Vixie said speak for itself, but... gpg-agent exposes unprotected filesystem endpoints on Windows, will not let you remove loaded keys, nor does it support any of the other official OpenSSH options. It also caches keys on disk. Microsoft's ssh-agent port is slightly less bad but still pretty bad; it caches them in the per-user Registry. https://github.com/PowerShell/Win32-OpenSSH/issues/1487#issuecomment-2894953357 I was hoping this was more common knowledge by now...
Replies (1)
-
@betabug@mastodon.sdf.org 2026-04-16 16:28
@bms48 @mathew @jonny @david_chisnall @chris_evelyn Where would I find information on this? Where can I read more about it? (Mainly the gpg-agent thing, I'm not interested in anything Windows). For something like this to be more common knowledge, I guess it needs more than a short news-cycle through some tech sites ... to reach people like me who are not specifically looking at security things all the time.