Today on "How is this the state of the art!?": ssh-agent
I just learned that you may get locked out of your server due to too many authentication requests because the ssh-agent protocol has zero provisions for prefiltering keys and just blindly tries everything in your database until one of them goes through.
Is there a security reason why ssh can't send the host's hash to the agent to tell it what server it should return the key for?


