diff options
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/access.md b/docs/access.md index 4bb5945..7392bb9 100644 --- a/docs/access.md +++ b/docs/access.md @@ -30,8 +30,8 @@ password hashes: every member reads the document). An entry that doesn't read as above gives less, never more: a capability that doesn't read is left out, and anything but `false` disables. * **`keys`**: the user's SSH keys, each by a name of its choosing, as an - `authorized_keys` line has it (`"laptop": "ssh-ed25519 AAAA…"`; Ed25519 only): what - it signs values with (Values signed by their users, below) and logs in with. A user + `authorized_keys` line has it (`"laptop": "ssh-ed25519 AAAA… alice@laptop"`; Ed25519 + only; the comment is kept and checks nothing): what it signs values with (Values signed by their users, below) and logs in with. A user manages its own, whatever else it may do: `GET /auth/keys`, `PUT /auth/keys/<name>` with the line, `DELETE /auth/keys/<name>`; under a strict policy, by signing its entry with only its keys changed (`continuum-signed key-add laptop |