Secretive and SSH Agent Forwarding

[PBHDK]

Hi all,

Do I understand the following correctly? Essentially, I was wondering whether Secretive addresses the issues everyone has with SSH Agent Forwarding by requiring every use of a key to be authenticated via Touch ID.

Simple example:

• Mac A runs secretive
• Mac A connects to Host B with Secretive key C and uses SSH Agent Forwarding
• GitHub Account also has key C
• Mac A clones a private GitHub repo on Host B => secretive prompts for Touch ID?

Many thanks,
Paul

[maxgoedjen]

@PBHDK TBH I haven't actually tested Secretive with forwarding in this manner – what behavior are you seeing for this?
Also, does everything work fine with a key that doesn't require Touch ID?

[PBHDK]

@maxgoedjen, I was able to test it in the meantime, and it works exactly as expected! Every use of an SSH key is confirmed via Secretive. It's very handy and did not require any extra configuration. Also tested with multiple SSH keys.

Do you think this would warrant a pull request to the FAQ section?

[maxgoedjen]

Nice, thanks for testing :)
On the FAQ - certainly couldn't hurt, especially if there's anything non-obvious about it or the process.

[mmhj]

@maxgoedjen I actually think it's a huge plus of Secretive that you should emphasise in the FAQ.

I tested this on a Macbook Pro 12.2.1, running Secretive 2.1.1, and Secretive does indeed require every use of a given SSH key to be authenticated.