summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorDaniel Kahn Gillmor <dkg@fifthhorseman.net>2008-06-19 00:13:39 -0400
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>2008-06-19 00:13:39 -0400
commit10d38ac8e8580322d533c3c5e1b7fad13363b7e5 (patch)
treeb3dd9d8ddadd8da76b15119f86ec8097f1b15913 /doc
parent18c15c1adf65d47df5b3753c99f06092d81906d0 (diff)
parentfadd814ce4351c3869e49d91b31aa5b2efc68a01 (diff)
Merge commit 'jrollins/master'
Diffstat (limited to 'doc')
-rw-r--r--doc/TODO31
-rw-r--r--doc/george/changelog3
2 files changed, 28 insertions, 6 deletions
diff --git a/doc/TODO b/doc/TODO
index bf51ae0..3538fbf 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -3,21 +3,19 @@ Next-Steps Monkeysphere Projects:
Detail advantages of monkeysphere: detail the race conditions in ssh,
and how the monkeysphere can help you reduce these threat vectors:
- threat model reduction diagrams
+ threat model reduction diagrams.
Determine how openssh handles multiple processes writing to
- known_hosts file (atomic appends?)
+ known_hosts/authorized_keys files (lockfile, atomic appends?)
Handle unknown hosts in such a way that they're not always removed
from known_hosts file. Ask user to lsign the host key?
-Handle multiple multiple hostnames (multiple user IDs?) when
- generating host keys with gen-key.
+Handle multiple hostnames (multiple user IDs?) when generating host
+ keys with gen-key.
Make sure alternate ports are handled for known_hosts.
-Add environment variables sections to man pages.
-
Script to import private key into ssh agent.
Provide a friendly interactive UI for marginal or failing client-side
@@ -56,3 +54,24 @@ Make it easier to do domain-relative ssh host trust signatures with
"tsign" in gpg(1).
Fix the order of questions when user does a tsign in gpg or gpg2.
+
+File bug against ssh-keygen about how "-R" option removes comments
+ from known_hosts file.
+
+File bug against ssh-keygen to see if we can get it to write to hash a
+ known_hosts file to/from stdout/stdin.
+
+Add environment variables sections to man pages.
+
+Environment variable scoping.
+
+Move environment variable precedence before conf file.
+
+When using ssh-proxycommand, if only host keys found are expired or
+ revoked, then output loud warning with prompt, or fail hard.
+
+Update monkeysphere-ssh-proxycommand man page with new keyserver
+ checking policy info.
+
+Update monkeysphere-ssh-proxycommand man page with info about
+ no-connect option.
diff --git a/doc/george/changelog b/doc/george/changelog
index 2442061..5d35355 100644
--- a/doc/george/changelog
+++ b/doc/george/changelog
@@ -7,6 +7,9 @@
* changes to this system *
******************************************************************************
+2008-06-18 - jrollins
+ * installed less, emacs;
+ * aptitude update && aptitude dist-upgrade
2008-06-18 - micah
* debootstrap'd debian etch install