Say I provide someone with my public SSH key, the id_rsa.pub and he/she installs it on a server that is compromised, and I am asked to login.
Does the login process involve sending my private key to the compromised server?
If yes, then the attacker now has access to my private SSH key, and that is scary.
If no, then why do I see this line in ssh -vvv output:
debug1: Server accepts key: pkalg ssh-rsa blen 277
This implies that the private key was sent to the server, and it accepted it.
Am I misunderstanding the problem?