SSH X11 Forwarding

Today discovered/learned that you can forward X11 to run GUI applications using ssh. Most linux machines I ssh into are just terminal based. The distinction between ssh -X user@server and ssh -Y user@server was interesting.

ssh -X

Basic X11 forwarding with security restrictions for untrusted forwarding. Remote applications are treated as "untrusted" clients. So better security posture.

ssh -Y

Trusted X11 forwarding with fewer restrictions applications have full access to your X11 server. Applications generally work better with fewer limitations. Weaker security posture.