X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;ds=sidebyside;f=man%2Fman1%2Fmonkeysphere-ssh-proxycommand.1;h=41b2e40db5c38f0da2f56d52bd34b96f5d4ea60e;hb=86f97d40d6fb60f7dde3c7e3a8aab0124f151d35;hp=5a84dc5edf9ab9e74e34077d5b836af5f7f9d7f0;hpb=b9bdffaa0e78adf517186917736060eb6522c07e;p=monkeysphere.git diff --git a/man/man1/monkeysphere-ssh-proxycommand.1 b/man/man1/monkeysphere-ssh-proxycommand.1 index 5a84dc5..41b2e40 100644 --- a/man/man1/monkeysphere-ssh-proxycommand.1 +++ b/man/man1/monkeysphere-ssh-proxycommand.1 @@ -37,17 +37,17 @@ connection to the host itself. .SH KEYSERVER CHECKING The proxy command has a fairly nuanced policy for when keyservers are -queried when processing host. If the host userID is not found in +queried when processing a host. If the host userID is not found in either the user's keyring or in the known_hosts file, then the keyserver is queried for the host userID. If the host userID is found in the user's keyring, then the keyserver is not checked. This -assumes that the keyring is kept up-to-date, in a cron job or the -like, so that revocations are properly handled. If the host userID is -not found in the user's keyring, but the host is listed in the -known_hosts file, then the keyserver is not checked. This last policy -might change in the future, possibly by adding a deferred check, so -that hosts that go from non-monkeysphere-enabled to -monkeysphere-enabled will be properly checked. +assumes that the keyring is kept up-to-date, in a cronjob or the like, +so that revocations are properly handled. If the host userID is not +found in the user's keyring, but the host is listed in the known_hosts +file, then the keyserver is not checked. This last policy might +change in the future, possibly by adding a deferred check, so that +hosts that go from non-monkeysphere-enabled to monkeysphere-enabled +will be properly checked. .SH ENVIRONMENT VARIABLES