I am using a linux server on the net and reverse port forwarding to connect to machines behind firewalls.
RemoteI reverse forward Port 22 to
HomeI ssh into
Lets say I am careful to compare host keys and fingerprints of
- Can an attacker on
Middlesee my unencrypted traffic? (Well I guess that would be a no)
- Can an attacker
MiddleFake the whole thing somehow and let me reveal my secrets? (keys, passphrase, stuff like that)
- What it boils down to: How vulnerable is that setup?
Intuitively I would say, that there's not much they can do, since
Middle does not see any unencrypted traffic, but I am still not entirely sure.