[mosh-users] New SSH_AUTH_SOCK value on a new connection to a box?

[Keith Winstein]

Many of our users' requests for a "roamable ssh-agent forwarding" might
already be served by running ssh-over-OpenVPN.

The main benefits from "slosh" would be:

(1) It would be runnable by an unprivileged user.

(2) It would keep TCP connections open even when sleeping and resuming
later.

(3) It would allow roaming with no fuss (I think OpenVPN is already pretty
close to this, but most VPNs aren't).

(4) It would exploit multihoming to stripe datagrams across the best set of
IPv4/v6 addresses available to the server and client.

-Keith


On Wed, Dec 18, 2013 at 4:11 PM, Jim Cheetham <jim.cheetham at otago.ac.nz>wrote:

> Excerpts from Keith Winstein's message of 2013-12-19 07:35:16 +1300:
> > (For the future, I think we have decided not to go in this direction of
> > adding ssh-agent forwarding and X11 forwarding and SOCKS forwarding to
> Mosh
> > and just to make a generic "slosh" as a separate program that ferries a
> > reliable stream across a roaming, multihomed connection.
>
> What would be the effective difference between that idea, and an actual
> VPN?
>
> -jim
> --
> Jim Cheetham, Information Security, University of Otago, Dunedin, N.Z.
> ✉ jim.cheetham at otago.ac.nz       ☏ +64 3 470 4670 ☏ m +64 21 227 0015
> ⚷ OpenPGP: B50F BE3B D49B 3A8A 9CC3 8966 9374 82CD C982 0605
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/mosh-users/attachments/20131218/c68c1597/attachment.htm