Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Advanced Usage documentation fix #1616

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

comradekingu
Copy link
Contributor

No description provided.

@@ -25,8 +25,9 @@ Turn Off Private Key

By default, all OnionShare services are protected with a private key, which Tor calls "client authentication".

The Tor Browser will ask you to enter your private key when you load an OnionShare service.
If you want allow the public to use your service, it's better to disable the private key altogether.
The Tor Browser will ask you to enter your private key when you want to offer an OnionShare service.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this done for just authentication, or also encryption.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Authentication. Tor's onion service protocol itself takes care of encryption.

Copy link
Collaborator

@mig5 mig5 Oct 18, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think the proposed change is accurate, actually. Private key is prompted by the browser when visiting (not 'offering') an OnionShare service. The original sentence is correct, or perhaps use the verb 'visit' rather than 'load'.

The Tor Browser will ask you to enter your private key when you load an OnionShare service.
If you want allow the public to use your service, it's better to disable the private key altogether.
The Tor Browser will ask you to enter your private key when you want to offer an OnionShare service.
If you want to allow the public to use your service, it's better to turn off the private key so that people you don't know
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not good.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't understand the comment.

If you want allow the public to use your service, it's better to disable the private key altogether.
The Tor Browser will ask you to enter your private key when you want to offer an OnionShare service.
If you want to allow the public to use your service, it's better to turn off the private key so that people you don't know
wont have to find your public key.
Copy link
Collaborator

@mig5 mig5 Oct 18, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better would be 'so that people won't have to enter it'. Also note wont - ought to be won't.

Copy link
Collaborator

@mig5 mig5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A few tweaks required before this can be merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants