From 95acebdc940d6e4c2cd91b0a594c57e8b884d010 Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Sat, 16 Jun 2018 21:40:38 +0100 Subject: [PATCH] Formatting --- doc/EN/faq.org | 2 +- website/EN/faq.html | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/EN/faq.org b/doc/EN/faq.org index 43e16564..6a3f851f 100644 --- a/doc/EN/faq.org +++ b/doc/EN/faq.org @@ -143,7 +143,7 @@ This system tries to block port scanners. Any other system trying to scan for op * Should I upload my GPG keys to keybase.io? It's not recommended unless there exists some compelling reason for you to be on there. That site asks users to upload the *private keys*, and even if the keys are client side encrypted with a passphrase there's always the chance that there will be a data leak in future and letter agencies will then have a full time opportunity to crack the passphrases. -Saying something resembling /"only noobs will use crackable private key passphrases"/ isn't good enough. A passphrase should not be considered to be a substitute for a private key. +Saying something resembling "/only noobs will use crackable private key passphrases/" isn't good enough. A passphrase should not be considered to be a substitute for a private key. * Keys and emails should not be stored on servers. Why do you do that? Ordinarily this is good advice. However, the threat model for a device in your home is different from the one for a generic server in a massive warehouse. Compare and contrast: diff --git a/website/EN/faq.html b/website/EN/faq.html index f572afea..a071922a 100644 --- a/website/EN/faq.html +++ b/website/EN/faq.html @@ -4,7 +4,7 @@ - + @@ -542,7 +542,7 @@ It's not recommended unless there exists some compelling reason for you to be on

-Saying something resembling /"only noobs will use crackable private key passphrases"/ isn't good enough. A passphrase should not be considered to be a substitute for a private key. +Saying something resembling "only noobs will use crackable private key passphrases" isn't good enough. A passphrase should not be considered to be a substitute for a private key.