8 hours ago
- The document specifies a key agent protocol for use in the Secure Shell (SSH) protocol, enabling clients to interact with a key management component that holds private keys.
- The protocol is a packetised request-response system driven solely by the client, with messages for loading, removing, listing, and using keys, as well as locking/unlocking the agent.
- Keys can be added with optional constraints such as lifetime or user confirmation, and agents may support only a subset of key types or refuse operations in certain contexts.
- Agent forwarding over SSH connections is supported, allowing remote systems to use stored keys without exposing key material, but caution is advised due to transitive trust.