Comment by theteapot
9 hours ago
> This shouldn't affect key-based authentication, though
Depends what you mean by key and what you mean by affect. They can still MITM you if your using pubilc key authentication and you accept the servers host key without verifying it.
Can they? I believe SSH key bind the public key auth to the server identity, so this kind of MITM is impossible.
(Just don't turn on ForwardAgent)
What does that even mean? ForwardAgent has nothing to do with it really.
No they can't.