Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

"SSH agent" is a confusing term to use here, because it usually stands for a daemon that caches authentication tokens.


Agreed, because VSCode does not provide an SSH Agent but does communicate with your local one (their own version of ForwardAgent, complete with the security implications that carries). And the way it does that breaks a popular macOS SSH agent: https://github.com/maxgoedjen/secretive/issues/543


Oh shoot, secretive is one of the few ways I knew of to keep track of each time an SSH key was actually used to auth something. I love using Agent Forwarding but the idea of anybody with root being able to arbitrarily auth stuff gave me a (perhaps unreasonable) feeling of insecurity.


I love secretive.


The "VSCode" before "SSH Agent" does the disambiguation fairly well.


Only of you already know what the VSCode agent does and then you don't need the article.


I, for one, was actually confused.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: