SSH agent extensions as an arbitrary RPC mechanism

This site took too long to answer. You can still read it on the original site — the toolbar below keeps your place in the directory.

A while back, I wrote about using the SSH agent protocol to satisfy WebAuthn requests . The main problem with this approach is that it required starting the SSH agent with a special argument and also involved being a little too friendly with the implementation - things worked because I could provide an arbitrary public key and the implementation never validated that, but it would be legitimate for…

Read on mjg59.dreamwidth.org ↗