16 lines
475 B
Markdown
16 lines
475 B
Markdown
|
# ADR 0009: SSH Trust And SSH Proxy
|
||
|
|
|
||
|
|
## Status
|
||
|
|
|
||
|
|
Accepted.
|
||
|
|
|
||
|
|
## Decision
|
||
|
|
|
||
|
|
SSH keys are admin signing identities and ecosystem integration points. SSH is
|
||
|
|
not a geth transport. Future SSH proxy support will carry SSH protocol bytes over
|
||
|
|
authorized Iroh streams, and OpenSSH will still perform normal login auth.
|
||
|
|
|
||
|
|
## Consequences
|
||
|
|
|
||
|
|
Knowing an Iroh EndpointID is insufficient to reach sshd. Geth authorization must
|
||
|
|
allow `ssh_proxy.connect` before any SSH/admin endpoint is opened.
|