← Back to context

Comment by jgtrosh

3 years ago

Use -J or ProxyJump in .SSH/config for a modern equivalent

Yes, please only use this!

The big advantage of this (over ssh user@host1 ssh user@host2) is that the jump host only sees the encrypted inner connection – it doesn't get access to the client's SSH agent/keychain, nor to the target host (host2) or data transmitted over the connection.