X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=website%2Ftechnical-details.mdwn;h=902e3560ea91fa509bf02a1b701a3b7a8ab3a576;hb=b024a2d3cacfe2fdb410daa830e04b2d9dfbcf4e;hp=b4decce6254cdfeaf215b027788b2bc6edb1c707;hpb=0141efcc55977e8f61bc7ccb31539e99d3ba3d49;p=monkeysphere.git diff --git a/website/technical-details.mdwn b/website/technical-details.mdwn index b4decce..902e356 100644 --- a/website/technical-details.mdwn +++ b/website/technical-details.mdwn @@ -3,3 +3,26 @@ # Technical Details # Under construction. + +## Host key verification ## + +When an ssh connection is initiated, the ssh client checks that the +host key presented by the server matches one found in the connecting +user's `known_hosts` file. If so, the ssh client allows the +connection to continue. If not, the client asks the user if they +would like to accept the host key for future session by asking the +user to verify the host key's fingerprint. + +### Adding a server to the monkeysphere ### + +Servers are "monkeysphere enabled" by generating an OpenPGP +authentication key for the server, translating the key into on ssh +key, and publishing the host key to the Web of Trust. + +### Verifying a host key ### + +## User authentication ## + +### Adding an individual to the monkeysphere ### + +### Verifying a user key ###