Hi Kevin, On Tuesday 11 May 2010 09:13 PM, Kevin Fenzi wrote: > On Tue, 11 May 2010 14:43:22 -0700 > Suvayu Ali<fatkasuvayu+linux@xxxxxxxxx> wrote: > >> May I suggest using -Y instead of -X. Its supposed to be more secure. > > This is not a good idea. ;) > > If you use -X it uses all the regular xauth checks for access/security. > > If you use -Y it makes a 'trusted' forward. This could leave you > exposed to remote access from a machine you have ssh'ed into. > You should only use -Y in the very rare event that you have a app that > doesn't work with -X. > I think the man page for ssh is a little misleading (mis-worded maybe?). I posted the relevant section from `man 5 ssh_config' in another message to this thread. That seems to imply otherwise. I'm not at all well versed in anything X, given the above mentioned doc would you still think its better to use -X over -Y? > kevin > -- Suvayu Open source is the future. It sets us free. -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
