SSH agent forwarding that asks before each use
SSH agent forwarding in Wardterm lets a server use your keys to reach another one, without copying them, and shows every time they are used.
build-box asks to sign with your key deploy-ed25519. Allow it only if you just started something there that needs this key, like ssh or git.
Agent forwarding lets a server you are on use your keys to reach another one, for example git pulling from GitHub on a build server. Wardterm has its own agent, and proxies too: SOCKS5 and HTTP CONNECT, with their login in the vault.
What it does
Only the keys you choose
The key of that server's login, or every key of the device if you choose, with a warning.
Ask before each use
Each signature waits for Allow. No answer in 60 seconds counts as no.
Only the last server
With a chain of jump hosts, only the server you land on can reach the agent.
SOCKS5 and HTTP proxies
Reach the first server of a chain through a proxy, with its login encrypted in the vault or inherited from the group.
Questions about SSH agent forwarding
Which plan includes agent forwarding?
Every plan, Free included, like the proxies.
Do my keys leave my device?
No. The app signs on your device and sends back only the signature.
Can I import my ProxyCommand?
Common ProxyCommand lines from ~/.ssh/config are imported as proxies.
Try Wardterm on your own servers
Download the app and add your first server.