search

StreisandEffect / streisand

Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
https://twitter.com/streisandvpn
Other
23.2k stars 1.99k forks source link

Document the need to keep and secure SSH keys #1168

Open nopdotcom opened 6 years ago

nopdotcom commented 6 years ago

I'm adding this here so I don't forget it. It's the tail end of the #1138 conversation.

@cpu wrote: Good thoughts. Something mentioning that the private key is A) important to keep secret (like a password) and B) required for all future access (like a password) would be a good follow up.

DarthSlider commented 6 years ago

As a person not familiar with SSH keys it took a lot of time for me to understood how to connect to my server. My solution was to disable key authorization and log in via password.

nopdotcom commented 6 years ago

SSH key management in the Streisand workflow is non-standard, and a lot of "getting started" instructions found elsewhere may not make sense. Thanks for the reminder that this isn't quite done.

Frichetten commented 6 years ago

Hey @nopdotcom, could you elaborate more? I'm a little unclear what you meant in regards to it being 'non-standard'?

baimafeima commented 6 years ago

Are my suggestions/questions from #1138 already worked into the instructions on the website?

Frichetten commented 6 years ago

@baimafeima there were some changes to improve the explanation of SSH key usage. Do you feel that it is enough to close this issue?