Wait, seriously? How would you do that? And why doesn't it work for ssh keys?
I was under the impression password auth worked very similarly to key auth, as in, the actual bytes of the password or private key are never sent over the wire.
I was under the impression password auth worked very similarly to key auth, as in, the actual bytes of the password or private key are never sent over the wire.
(If I remember correctly just putting SSHd in the highest debug level, which logs every byte received, did work to intercept passwords)