7. Forwarding Access to an Agent

Agent access may be forwarded over an SSH connection using [RFC4254]. Support may be advertised with agent-forward in SSH_MSG_EXT_INFO. Many deployed implementations use the pre-standardization names [email protected] and [email protected].

A client requests forwarding with a channel request named agent-req or [email protected]. The server opens agent connections using channel type agent-connect or [email protected]. SSH clients SHOULD handle multiple concurrent forwarded connections and MUST refuse unauthorized agent connection requests.