Hacker News Reader

If you ssh into a host and use ssh-agent + `ForwardAgent Yes` - host can get your PRIVATE key.

They can't get your private key - But they can make use of it so long as you're connected. Definitely only enable `ForwardAgent` for hosts that you trust.

Reply on news.ycombinator.com