geth/docs/adr/0009-ssh-trust-and-ssh-proxy.md

ADR 0009: SSH Trust And SSH Proxy

Status

Accepted.

Decision

SSH keys are admin signing identities and ecosystem integration points. SSH is not a geth transport. Future SSH proxy support will carry SSH protocol bytes over authorized Iroh streams, and OpenSSH will still perform normal login auth.

Consequences

Knowing an Iroh EndpointID is insufficient to reach sshd. Geth authorization must allow ssh_proxy.connect before any SSH/admin endpoint is opened.