Comment on Making an SSH client the hard wayparentComments−Asmod4n3yAnd then the addon intercepts the loading of the Wasm code, injects it’s own payload into it and has access to the keys.−lxgr3yWhat keys? I think the implementation does not use regular SSH keys for SSH authentication, but rather something custom (I believe traffic to port 22 on each SSH enabled client is intercepted and the daemon handles authentication itself).−lxgr3yFor the downvotes: Am I misunderstanding Tailscale's implementation?I'm not commenting on whether it's a good or bad idea, but we should at least be talking about the same thing.
Comments
And then the addon intercepts the loading of the Wasm code, injects it’s own payload into it and has access to the keys.
What keys? I think the implementation does not use regular SSH keys for SSH authentication, but rather something custom (I believe traffic to port 22 on each SSH enabled client is intercepted and the daemon handles authentication itself).
For the downvotes: Am I misunderstanding Tailscale's implementation?
I'm not commenting on whether it's a good or bad idea, but we should at least be talking about the same thing.