X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=website%2Fwhy.mdwn;h=93ea56018af6dcd661ca413a5bd7f8a109affc57;hb=75e989ccee39ce99a44898cec16229f74f515efe;hp=336643988abae643b51c514f079194884fb67cc8;hpb=86f97d40d6fb60f7dde3c7e3a8aab0124f151d35;p=monkeysphere.git diff --git a/website/why.mdwn b/website/why.mdwn index 3366439..93ea560 100644 --- a/website/why.mdwn +++ b/website/why.mdwn @@ -14,8 +14,8 @@ seeing messages like this? Do you actually tediously check the fingerprint against a cryptographically-signed message from the admin, or do you just cross your fingers and type "yes"? Do you wish there was a better way to -verify that the host your connecting to actually is the host you mean -to connect to? Shouldn't our tools be able to figure this out +verify that the host you are connecting to actually is the host you +mean to connect to? Shouldn't our tools be able to figure this out automatically? Do you use `ssh`'s public key authentication for convenience and/or @@ -118,10 +118,10 @@ allows a very flexible trust model, ranging all over the map, at the choice of the user: * individual per-host certifications by each client (much like the - stock OpenSSH behavior), + stock OpenSSH behavior), or * strict centralized Certificate Authorities (much like proposed X.509 - models), and + models), or * a more human-centric model that recognizes individual differences in ranges of trust and acceptance.