From: Daniel Kahn Gillmor Date: Thu, 4 Sep 2008 06:06:59 +0000 (-0400) Subject: a few tweaks to the monkeysphere announcement. X-Git-Tag: monkeysphere_0.14-1~9 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=e01d9c5abd3f06a182e7e8879d9ff8e3c241ad81;p=monkeysphere.git a few tweaks to the monkeysphere announcement. --- diff --git a/doc/announcement.html b/doc/announcement.html index 68607ac..0dbb249 100644 --- a/doc/announcement.html +++ b/doc/announcement.html @@ -18,29 +18,29 @@ keys? Do you know the administrators of your servers, and wish that SSH could verify new host keys from them automatically, based on your personal connections to the web-of-trust? Do you wish you could -revoke and rotate your old SSH authentication keys without having to -log into every single machine?

+revoke and/or rotate your old SSH authentication keys without having +to log into every single machine you have an account on?

Do you administer servers, and wish you could re-key them without -sowing massive pain and confusion among your users (or worse, -encouraging bad security habits among them)? Do you wish you could -grant access to your users by name, instead of by opaque string? Do -you wish you could rapidly revoke access to a user (or compromised -key) across a group of machines by disabling authentication for that -user?

+sowing massive confusion among your users (or worse, encouraging bad +security habits among them)? Do you wish you could grant access to +your users by name, instead of by opaque string? Do you wish you +could rapidly revoke access to a user (or compromised key) across a +group of machines by disabling authentication for that user?

A group of us have been working on a public key infrastructure for SSH. Monkeysphere makes use of the existing OpenPGP web-of-trust to fetch and cryptographically -validate (and revoke!) keys. This works in either directions: both +validate (and revoke!) keys. This works in both direction: authorized_keys and known_hosts are handled. Monkeysphere gives users and admins tools to deal with SSH keys by thinking about the people and machines to whom the keys belong, instead of requiring humans to do tedious (and error-prone) manual key verification.

-

We have debian packages -available which should install against lenny, We have debian +packages available which should install against lenny (for i386, +amd64, powerpc, and arm architectures at the moment), a mailing list, and open ears for good questions, suggestions and criticism.