Commit graph

597 commits

Author SHA1 Message Date
Tammi L. Coles
1dc1a81474 improve headers 2023-11-30 19:06:46 +01:00
Tammi L. Coles
58f14b495d rewrite exception statement re: TSKs 2023-11-30 18:55:39 +01:00
Tammi L. Coles
fc8d0e1692 change headers 2023-11-30 18:54:58 +01:00
Tammi L. Coles
6b574e736c create summary of KO attacks, KOpenPGP site 2023-11-30 18:19:33 +01:00
Tammi L. Coles
78b1de81ec edit "Additional keystore duties" section 2023-11-30 17:53:53 +01:00
Tammi L. Coles
84ba8afc5c change key store to keystore, edit two-tier section 2023-11-30 17:34:28 +01:00
Tammi L. Coles
cd6b049ae5 edit ### Two-tier architecture 2023-11-30 17:19:42 +01:00
Tammi L. Coles
8bfb2c8bf1 edit design options/variations of privarte key store systems 2023-11-30 15:38:23 +01:00
Tammi L. Coles
249948096c briefly introduce the content of the Private key stores section 2023-11-30 15:07:39 +01:00
Tammi L. Coles
4ddf0388ed edit Private key operations 2023-11-30 14:54:44 +01:00
Tammi L. Coles
f508aaa362 edit ch5 section on OpenPGP cards for private keys 2023-11-30 14:47:51 +01:00
Tammi L. Coles
2d1c71fd7d edit passkey section (restored) 2023-11-28 23:26:31 +01:00
Tammi L. Coles
f6e456dd55 edit ch5 tsk format 2023-11-28 21:56:12 +01:00
Tammi L. Coles
710c7b830b edit Terminology: "certificates" and "private keys 2023-11-28 21:45:36 +01:00
Tammi L. Coles
5fbc684fd4 correct minor issues ch5 intro 2023-11-28 21:33:55 +01:00
Heiko Schaefer
7847105383
import new diagrams from skvisual 2023-11-27 21:30:20 +01:00
Heiko Schaefer
3a921f6528
Merge branch 'draft' into tammi-ch8-heiko
# Conflicts:
#	book/source/08-signing_components.md
2023-11-25 23:09:12 +01:00
Heiko Schaefer
8431dd8e1d
re-instate section structure 2023-11-25 23:05:13 +01:00
Heiko Schaefer
4f179701e3
Merge remote-tracking branch 'origin/liw-ch3-tammi' into draft
# Conflicts:
#	book/source/03-cryptography.md
2023-11-25 23:00:47 +01:00
Tammi L. Coles
f1e6da7e74 try again 2023-11-25 22:53:02 +01:00
Tammi L. Coles
90f2ad9c4f further streamline commit 7f68db756c 2023-11-25 22:15:37 +01:00
Tammi L. Coles
8ab3d359e6 edit to commit 36399d330b 2023-11-25 22:07:07 +01:00
Heiko Schaefer
11542af645
add placeholder "append-only" link target 2023-11-25 20:03:58 +01:00
Heiko Schaefer
dc9e9510d0
ci: codespell fixes 2023-11-25 20:01:26 +01:00
Heiko Schaefer
3130ebee43
Merge branch 'heiko-ch4' into draft
# Conflicts:
#	book/source/04-certificates.md
2023-11-25 19:40:56 +01:00
Heiko Schaefer
5621dfa79c
avoid using the technical term "key" as a generic word 2023-11-25 19:29:18 +01:00
Heiko Schaefer
b121676a0d
i think "demonstrate" gestures partly in the wrong direction.
much agility is already built in. the point here is not that more agility can be built in on short notice (even though that is also true). but rather that OpenPGP already allows users to make a lot of decisions about which mechanisms to use, right now.
2023-11-25 19:26:55 +01:00
Heiko Schaefer
0a2bccb380
generalize: User Attributes are uncommon, but we should include them 2023-11-25 19:20:42 +01:00
Heiko Schaefer
ee1e9d5396
simplify/clarify section title 2023-11-25 19:20:00 +01:00
Heiko Schaefer
4635d15ece
drop duplication 2023-11-25 18:41:35 +01:00
Heiko Schaefer
111f6cca41
attempt at footnote with more detail on fingerprint uniqueness. the exact content might need more tweaking. 2023-11-25 18:39:02 +01:00
Heiko Schaefer
a431853832
zoom_certificates doesn't talk about private keys (anymore). de-emphasize the packet-level chapter (it's still very unclear to me how many readers should look at those chapters). 2023-11-25 18:24:36 +01:00
Heiko Schaefer
3b0dfd5cd7
move contextualization paragraphs up to the first block 2023-11-25 18:14:45 +01:00
Heiko Schaefer
06c40b0275
i'm uncomfortable offering an explanation for this recommendation
(i don't think security is a concern here. maybe interoperability?)
2023-11-25 17:49:35 +01:00
Heiko Schaefer
43b26012de
minor tweak 2023-11-25 17:46:07 +01:00
Heiko Schaefer
77a0a69d78
clarify language 2023-11-25 17:43:30 +01:00
Heiko Schaefer
993da3ccf4
don't use the generic word "critical" in a context where it has a technical meaning 2023-11-25 17:39:47 +01:00
Heiko Schaefer
887c5bf0e6
remove dangling footnote syntax 2023-11-25 17:32:33 +01:00
Heiko Schaefer
127f36162c
move example texts into diagram notes 2023-11-25 17:32:33 +01:00
Heiko Schaefer
5887bcc880
edit "trust signature" text
- lean on the word "trust" as little as possible
- some clarifications
2023-11-25 17:32:33 +01:00
Tammi L. Coles
8c8cf2ed50 edit commit 02b0785584 on the not-exactly-unique fingerprint 2023-11-25 16:30:54 +01:00
Tammi L. Coles
4a2595c5f7 remove comma in commit e0457bac64 2023-11-25 16:24:09 +01:00
Tammi L. Coles
f0e5c00803 reorganize and structure content to answer commit 992c878fea 2023-11-25 16:17:31 +01:00
Tammi L. Coles
7cb536008b edit commit 451b881c03 2023-11-25 16:03:52 +01:00
Heiko Schaefer
e49d1e69af
clarify certification text
And use Bob's real fingerprint.
2023-11-25 15:57:00 +01:00
Heiko Schaefer
4b9c064a8b
it seems confusing to imply that bob will necessarily distribute a third-party certification, this is only true some of the time 2023-11-25 15:43:24 +01:00
Heiko Schaefer
a3b5e263e3
add missing space 2023-11-25 15:36:40 +01:00
Tammi L. Coles
018a6107c1 edit to commit 441936eb98 2023-11-25 15:33:34 +01:00
Heiko Schaefer
5f694e8c23
clarification: "append" implies "stored at the end of a file." this is not generally true for these two cases.
I now realize that this is weird: we're claiming that certificates are "append only". However, the meaning of that term, in OpenPGP is ... not about the location of additions. Rather it just means "we only get to add packets, not remove them". Regardless of packet order.
2023-11-25 15:11:17 +01:00
Heiko Schaefer
5faec16cb8
Improve on original text: "Elements" encompass both "components" and "signatures." Regarding malicious addition, we care about both.
Additionally, "typically" reads confusingly weak to me, erring on the side of "maybe too strong" with "will" seems better.
2023-11-25 14:56:17 +01:00