summaryrefslogtreecommitdiff
path: root/website/index.mdwn
diff options
context:
space:
mode:
authorDaniel Kahn Gillmor <dkg@fifthhorseman.net>2008-08-16 01:14:07 -0400
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>2008-08-16 01:14:07 -0400
commit9806e7372feb98c9acdbe0b3e428609539b40aa5 (patch)
treef2390d77158a6dfff01a6983991342db6ab38096 /website/index.mdwn
parentc9acc1237d8e21d74fe7070af1b061c888664e8b (diff)
added "Why?" to the web site.
Diffstat (limited to 'website/index.mdwn')
-rw-r--r--website/index.mdwn13
1 files changed, 7 insertions, 6 deletions
diff --git a/website/index.mdwn b/website/index.mdwn
index 853c75b..652f195 100644
--- a/website/index.mdwn
+++ b/website/index.mdwn
@@ -9,7 +9,7 @@ yourself and the servers you administer or connect to. OpenPGP keys
are tracked via GnuPG, and managed in the `known_hosts` and
`authorized_keys` files used by OpenSSH for connection authentication.
-[[bugs]] | [[download]] | [[news]] | [[documentation|doc]]
+[[bugs]] | [[download]] | [[news]] | [[documentation|doc]] | [[why should i be interested|why]]
## Conceptual overview ##
@@ -26,13 +26,14 @@ keys for authenticating to a server (known as
"`PubkeyAuthentication`"), rather than relying on a password exchange.
But again, the public part of the key needs to be transmitted to the
server through a secure out-of-band channel (usually via a separate
-password-based SSH connection) in order for this type of
-authentication to work
+password-based SSH connection or a (hopefully signed) e-mail to the
+system administrator) in order for this type of authentication to
+work.
[OpenSSH](http://openssh.com/) currently provides a functional way to
-managing the RSA and DSA keys required for these interactions through
-the `known_hosts` and `authorized_keys` files. However, it lacks
-any type of [Public Key Infrastructure
+manage the RSA and DSA keys required for these interactions through
+the `known_hosts` and `authorized_keys` files. However, it lacks any
+type of [Public Key Infrastructure
(PKI)](http://en.wikipedia.org/wiki/Public_Key_Infrastructure) that
can verify that the keys being used really are the one required or
expected.