free
/
freedombone
關註 1
收藏 0
複製 0
程式碼 問題管理 0 合併請求 0 版本發佈 0 Wiki Activity
瀏覽代碼

ssh access via onion domain

Bob Mottram 9 年之前
父節點
633ea652b3
當前提交
0b078b5718
共有 2 個文件被更改，包括 153 次插入 和 98 次删除
分割檢視 顯示文件統計
  1. 27
    8
      doc/EN/usage.org
  2. 126
    90
      website/EN/usage.html

+ 27
- 8
doc/EN/usage.org 查看文件 

@@ -16,14 +16,15 @@
16 16 
 </center>
17 17 
 #+END_HTML
18 18
19 
-| [[Readme]]                 |
20 
-| [[Improving ssh security]] |
21 
-| [[./usage_email.html][Using Email]]            |
22 
-| [[Syncing to the Cloud]]   |
23 
-| [[Play Music]]             |
24 
-| [[Microblogging]]          |
25 
-| [[Social Network]]         |
26 
-| [[Chat Services]]          |
19 
+| [[Readme]]                                              |
20 
+| [[Improving ssh security]]                              |
21 
+| [[Administrating the system via an onion address (Tor)]] |
22 
+| [[./usage_email.html][Using Email]]                                         |
23 
+| [[Syncing to the Cloud]]                                |
24 
+| [[Play Music]]                                          |
25 
+| [[Microblogging]]                                       |
26 
+| [[Social Network]]                                      |
27 
+| [[Chat Services]]                                       |
27 28
28 29 
 * Readme
29 30 
 After the system has installed a README file will be generated which contains passwords and some brief advice on using the installed systems. You can read this with the following commands:
 
@@ -66,6 +67,24 @@ There are advantages and disadvantages to using ssh keys for logins. The advanta
66 67
67 68 
 If you wish to only use ssh keys then log in to the Freedombone, become the root user and open the control panel with the 'control' command. Select /Security Settings/ then keep hitting enter until you reach the question about allowing password logins. Select "no" for that, then apply the settings. Any subsequent attempts to log in via a password will then be denied.
68 69
70 
+* Administrating the system via an onion address (Tor)
71 
+You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
72 
+
73 
+#+BEGIN_SRC bash
74 
+ssh username@freedombone.local -p 2222
75 
+sudo control
76 
+#+END_SRC
77 
+
78 
+Then select "About this system" and look for the onion address for ssh. You can then close the terminal and open another, then do the following:
79 
+
80 
+#+BEGIN_SRC bash
81 
+sudo apt-get install tor connect-proxy
82 
+echo 'Host *.onion' >> ~/.ssh/config
83 
+echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> ~/.ssh/config
84 
+ssh username@address.onion -p 2222
85 
+#+END_SRC
86 
+
87 
+Subsequently even if dynamic DNS isn't working you may still be able to administer your system. Using the onion address also gives you some degree of protection against corporate or government metadata analysis, since it becomes more difficult to passively detect which systems are communicating.
69 88 
 * Syncing to the Cloud
70 89 
 ** Initial install
71 90 
 Within a browser go to your owncloud domain, then create an administrator account. The username and password can be anything, and ideally should be generated from a password manager.

+ 126
- 90
website/EN/usage.html 查看文件 

@@ -3,15 +3,15 @@
3 3 
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4 4 
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5 
 <head>
6 
-<title></title>
7 
-<!-- 2016-01-07 Thu 19:25 -->
6 
+<!-- 2016-01-08 Fri 14:08 -->
8 7 
 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
8 
+<meta  name="viewport" content="width=device-width, initial-scale=1" />
9 
+<title></title>
9 10 
 <meta  name="generator" content="Org-mode" />
10 11 
 <meta  name="author" content="Bob Mottram" />
11 12 
 <meta  name="description" content="Turn the Beaglebone Black into a personal communications server"
12 13 
  />
13 14 
 <meta  name="keywords" content="freedombox, debian, beaglebone, hubzilla, email, web server, home server, internet, censorship, surveillance, social network, irc, jabber" />
14 
-<meta  name="viewport" content="width=device-width, initial-scale=1" />
15 15 
 <style type="text/css">
16 16 
  <!--/*--><![CDATA[/*><!--*/
17 17 
   .title  { text-align: center;
 
@@ -179,27 +179,31 @@ for the JavaScript code in this tag.
179 179 
 </tr>
180 180
181 181 
 <tr>
182 
+<td class="org-left"><a href="#orgheadline3">Administrating the system via an onion address (Tor)</a></td>
183 
+</tr>
184 
+
185 
+<tr>
182 186 
 <td class="org-left"><a href="./usage_email.html">Using Email</a></td>
183 187 
 </tr>
184 188
185 189 
 <tr>
186 
-<td class="org-left"><a href="#orgheadline3">Syncing to the Cloud</a></td>
190 
+<td class="org-left"><a href="#orgheadline4">Syncing to the Cloud</a></td>
187 191 
 </tr>
188 192
189 193 
 <tr>
190 
-<td class="org-left"><a href="#orgheadline4">Play Music</a></td>
194 
+<td class="org-left"><a href="#orgheadline5">Play Music</a></td>
191 195 
 </tr>
192 196
193 197 
 <tr>
194 
-<td class="org-left"><a href="#orgheadline5">Microblogging</a></td>
198 
+<td class="org-left"><a href="#orgheadline6">Microblogging</a></td>
195 199 
 </tr>
196 200
197 201 
 <tr>
198 
-<td class="org-left"><a href="#orgheadline6">Social Network</a></td>
202 
+<td class="org-left"><a href="#orgheadline7">Social Network</a></td>
199 203 
 </tr>
200 204
201 205 
 <tr>
202 
-<td class="org-left"><a href="#orgheadline7">Chat Services</a></td>
206 
+<td class="org-left"><a href="#orgheadline8">Chat Services</a></td>
203 207 
 </tr>
204 208 
 </tbody>
205 209 
 </table>
 
@@ -284,11 +288,43 @@ If you wish to only use ssh keys then log in to the Freedombone, become the root
284 288 
 </div>
285 289
286 290 
 <div id="outline-container-orgheadline3" class="outline-2">
287 
-<h2 id="orgheadline3">Syncing to the Cloud</h2>
291 
+<h2 id="orgheadline3">Administrating the system via an onion address (Tor)</h2>
288 292 
 <div class="outline-text-2" id="text-orgheadline3">
289 
-</div><div id="outline-container-orgheadline8" class="outline-3">
290 
-<h3 id="orgheadline8">Initial install</h3>
291 
-<div class="outline-text-3" id="text-orgheadline8">
293 
+<p>
294 
+You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
295 
+</p>
296 
+
297 
+<div class="org-src-container">
298 
+
299 
+<pre class="src src-bash">ssh username@freedombone.local -p 2222
300 
+sudo control
301 
+</pre>
302 
+</div>
303 
+
304 
+<p>
305 
+Then select "About this system" and look for the onion address for ssh. You can then close the terminal and open another, then do the following:
306 
+</p>
307 
+
308 
+<div class="org-src-container">
309 
+
310 
+<pre class="src src-bash">sudo apt-get install tor connect-proxy
311 
+<span class="org-builtin">echo</span> <span class="org-string">'Host *.onion'</span> &gt;&gt; ~/.ssh/config
312 
+<span class="org-builtin">echo</span> <span class="org-string">'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p'</span> &gt;&gt; ~/.ssh/config
313 
+ssh username@address.onion -p 2222
314 
+</pre>
315 
+</div>
316 
+
317 
+<p>
318 
+Subsequently even if dynamic DNS isn't working you may still be able to administer your system. Using the onion address also gives you some degree of protection against corporate or government metadata analysis, since it becomes more difficult to passively detect which systems are communicating.
319 
+</p>
320 
+</div>
321 
+</div>
322 
+<div id="outline-container-orgheadline4" class="outline-2">
323 
+<h2 id="orgheadline4">Syncing to the Cloud</h2>
324 
+<div class="outline-text-2" id="text-orgheadline4">
325 
+</div><div id="outline-container-orgheadline9" class="outline-3">
326 
+<h3 id="orgheadline9">Initial install</h3>
327 
+<div class="outline-text-3" id="text-orgheadline9">
292 328 
 <p>
293 329 
 Within a browser go to your owncloud domain, then create an administrator account. The username and password can be anything, and ideally should be generated from a password manager.
294 330 
 </p>
 
@@ -332,9 +368,9 @@ Log out from the administrator account and then log back in as the user you just
332 368 
 </p>
333 369 
 </div>
334 370 
 </div>
335 
-<div id="outline-container-orgheadline9" class="outline-3">
336 
-<h3 id="orgheadline9">On Android</h3>
337 
-<div class="outline-text-3" id="text-orgheadline9">
371 
+<div id="outline-container-orgheadline10" class="outline-3">
372 
+<h3 id="orgheadline10">On Android</h3>
373 
+<div class="outline-text-3" id="text-orgheadline10">
338 374 
 <p>
339 375 
 Within F-droid search for <b>owncloud</b> and install the client. Also install <b>CalDAV Sync Adapter</b>.
340 376 
 </p>
 
@@ -358,9 +394,9 @@ You will also be prompted to enter login details. Your Android and Owncloud cale
358 394 
 </p>
359 395 
 </div>
360 396 
 </div>
361 
-<div id="outline-container-orgheadline10" class="outline-3">
362 
-<h3 id="orgheadline10">On Linux</h3>
363 
-<div class="outline-text-3" id="text-orgheadline10">
397 
+<div id="outline-container-orgheadline11" class="outline-3">
398 
+<h3 id="orgheadline11">On Linux</h3>
399 
+<div class="outline-text-3" id="text-orgheadline11">
364 400 
 <p>
365 401 
 Open your software center and search for "owncloud client". Enter your owncloud domain name (with the https prefix) and login details.
366 402 
 </p>
 
@@ -371,12 +407,12 @@ You can now drag files into the <b>~/owncloud</b> directory and they will automa
371 407 
 </div>
372 408 
 </div>
373 409 
 </div>
374 
-<div id="outline-container-orgheadline4" class="outline-2">
375 
-<h2 id="orgheadline4">Play Music</h2>
376 
-<div class="outline-text-2" id="text-orgheadline4">
377 
-</div><div id="outline-container-orgheadline11" class="outline-3">
378 
-<h3 id="orgheadline11">With the DLNA service</h3>
379 
-<div class="outline-text-3" id="text-orgheadline11">
410 
+<div id="outline-container-orgheadline5" class="outline-2">
411 
+<h2 id="orgheadline5">Play Music</h2>
412 
+<div class="outline-text-2" id="text-orgheadline5">
413 
+</div><div id="outline-container-orgheadline12" class="outline-3">
414 
+<h3 id="orgheadline12">With the DLNA service</h3>
415 
+<div class="outline-text-3" id="text-orgheadline12">
380 416 
 <p>
381 417 
 An easy way to play music on any mobile device in your home is to use the DLNA service. Copy your music into a directory called "<i>Music</i>" on a USB thumb drive and then insert it into from socket on the Beaglebone.
382 418 
 </p>
 
@@ -416,9 +452,9 @@ The DLNA service will only work within your local home network, and isn't remote
416 452 
 </div>
417 453 
 </div>
418 454
419 
-<div id="outline-container-orgheadline12" class="outline-3">
420 
-<h3 id="orgheadline12">With Owncloud</h3>
421 
-<div class="outline-text-3" id="text-orgheadline12">
455 
+<div id="outline-container-orgheadline13" class="outline-3">
456 
+<h3 id="orgheadline13">With Owncloud</h3>
457 
+<div class="outline-text-3" id="text-orgheadline13">
422 458 
 <p>
423 459 
 The main advantage of playing music via Owncloud is that you can do that from anywhere - not only within your home network.
424 460 
 </p>
 
@@ -430,12 +466,12 @@ By default a music player is installed into Owncloud, so all you need to do is t
430 466 
 </div>
431 467 
 </div>
432 468
433 
-<div id="outline-container-orgheadline5" class="outline-2">
434 
-<h2 id="orgheadline5">Microblogging</h2>
435 
-<div class="outline-text-2" id="text-orgheadline5">
436 
-</div><div id="outline-container-orgheadline13" class="outline-3">
437 
-<h3 id="orgheadline13">Initial configuration</h3>
438 
-<div class="outline-text-3" id="text-orgheadline13">
469 
+<div id="outline-container-orgheadline6" class="outline-2">
470 
+<h2 id="orgheadline6">Microblogging</h2>
471 
+<div class="outline-text-2" id="text-orgheadline6">
472 
+</div><div id="outline-container-orgheadline14" class="outline-3">
473 
+<h3 id="orgheadline14">Initial configuration</h3>
474 
+<div class="outline-text-3" id="text-orgheadline14">
439 475 
 <p>
440 476 
 To set up your microblog go to:
441 477 
 </p>
 
@@ -543,20 +579,20 @@ When the install is complete you will see a lot of warnings but just ignore thos
543 579 
 </div>
544 580 
 </div>
545 581 
 </div>
546 
-<div id="outline-container-orgheadline6" class="outline-2">
547 
-<h2 id="orgheadline6">Social Network</h2>
548 
-<div class="outline-text-2" id="text-orgheadline6">
549 
-</div><div id="outline-container-orgheadline14" class="outline-3">
550 
-<h3 id="orgheadline14">Domains</h3>
551 
-<div class="outline-text-3" id="text-orgheadline14">
582 
+<div id="outline-container-orgheadline7" class="outline-2">
583 
+<h2 id="orgheadline7">Social Network</h2>
584 
+<div class="outline-text-2" id="text-orgheadline7">
585 
+</div><div id="outline-container-orgheadline15" class="outline-3">
586 
+<h3 id="orgheadline15">Domains</h3>
587 
+<div class="outline-text-3" id="text-orgheadline15">
552 588 
 <p>
553 589 
 Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
554 590 
 </p>
555 591 
 </div>
556 592 
 </div>
557 
-<div id="outline-container-orgheadline15" class="outline-3">
558 
-<h3 id="orgheadline15">Initial install</h3>
559 
-<div class="outline-text-3" id="text-orgheadline15">
593 
+<div id="outline-container-orgheadline16" class="outline-3">
594 
+<h3 id="orgheadline16">Initial install</h3>
595 
+<div class="outline-text-3" id="text-orgheadline16">
560 596 
 <p>
561 597 
 Visit the URL of your Hubzilla site and you should be taken through the rest of the installation procedure.  Note that this may take a few minutes so don't be concerned if it looks as if it has crashed - just leave it running.
562 598 
 </p>
 
@@ -567,19 +603,19 @@ When installation is complete you can register a new user.
567 603 
 </div>
568 604 
 </div>
569 605 
 </div>
570 
-<div id="outline-container-orgheadline7" class="outline-2">
571 
-<h2 id="orgheadline7">Chat Services</h2>
572 
-<div class="outline-text-2" id="text-orgheadline7">
573 
-</div><div id="outline-container-orgheadline16" class="outline-3">
574 
-<h3 id="orgheadline16">IRC</h3>
575 
-<div class="outline-text-3" id="text-orgheadline16">
606 
+<div id="outline-container-orgheadline8" class="outline-2">
607 
+<h2 id="orgheadline8">Chat Services</h2>
608 
+<div class="outline-text-2" id="text-orgheadline8">
609 
+</div><div id="outline-container-orgheadline17" class="outline-3">
610 
+<h3 id="orgheadline17">IRC</h3>
611 
+<div class="outline-text-3" id="text-orgheadline17">
576 612 
 <p>
577 613 
 IRC is useful for multi-user chat. The classic use case is for software development where many engineers might need to coordinate their activities, but it's also useful for meetings, parties and general socialising.
578 614 
 </p>
579 615 
 </div>
580 
-<div id="outline-container-orgheadline17" class="outline-4">
581 
-<h4 id="orgheadline17">Irssi</h4>
582 
-<div class="outline-text-4" id="text-orgheadline17">
616 
+<div id="outline-container-orgheadline18" class="outline-4">
617 
+<h4 id="orgheadline18">Irssi</h4>
618 
+<div class="outline-text-4" id="text-orgheadline18">
583 619 
 <p>
584 620 
 If you are using the <a href="http://www.irssi.org/">irssi</a> IRC client then you can use the following commands to connect to your IRC server.
585 621 
 </p>
 
@@ -593,9 +629,9 @@ If you are using the <a href="http://www.irssi.org/">irssi</a> IRC client then y
593 629 
 </div>
594 630 
 </div>
595 631 
 </div>
596 
-<div id="outline-container-orgheadline18" class="outline-4">
597 
-<h4 id="orgheadline18">XChat</h4>
598 
-<div class="outline-text-4" id="text-orgheadline18">
632 
+<div id="outline-container-orgheadline19" class="outline-4">
633 
+<h4 id="orgheadline19">XChat</h4>
634 
+<div class="outline-text-4" id="text-orgheadline19">
599 635 
 <p>
600 636 
 If you are using the XChat client:
601 637 
 </p>
 
@@ -631,12 +667,12 @@ Click <b>close</b> and then <b>connect</b>.
631 667 
 </div>
632 668 
 </div>
633 669
634 
-<div id="outline-container-orgheadline24" class="outline-3">
635 
-<h3 id="orgheadline24">XMPP/Jabber</h3>
636 
-<div class="outline-text-3" id="text-orgheadline24">
637 
-</div><div id="outline-container-orgheadline19" class="outline-4">
638 
-<h4 id="orgheadline19">Managing users</h4>
639 
-<div class="outline-text-4" id="text-orgheadline19">
670 
+<div id="outline-container-orgheadline25" class="outline-3">
671 
+<h3 id="orgheadline25">XMPP/Jabber</h3>
672 
+<div class="outline-text-3" id="text-orgheadline25">
673 
+</div><div id="outline-container-orgheadline20" class="outline-4">
674 
+<h4 id="orgheadline20">Managing users</h4>
675 
+<div class="outline-text-4" id="text-orgheadline20">
640 676 
 <p>
641 677 
 To add a user:
642 678 
 </p>
 
@@ -695,9 +731,9 @@ prosodyctl status
695 731 
 </div>
696 732 
 </div>
697 733
698 
-<div id="outline-container-orgheadline20" class="outline-4">
699 
-<h4 id="orgheadline20">Using with Jitsi</h4>
700 
-<div class="outline-text-4" id="text-orgheadline20">
734 
+<div id="outline-container-orgheadline21" class="outline-4">
735 
+<h4 id="orgheadline21">Using with Jitsi</h4>
736 
+<div class="outline-text-4" id="text-orgheadline21">
701 737 
 <p>
702 738 
 Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
703 739 
 </p>
 
@@ -727,9 +763,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
727 763 
 </p>
728 764 
 </div>
729 765 
 </div>
730 
-<div id="outline-container-orgheadline21" class="outline-4">
731 
-<h4 id="orgheadline21">Using with Ubuntu</h4>
732 
-<div class="outline-text-4" id="text-orgheadline21">
766 
+<div id="outline-container-orgheadline22" class="outline-4">
767 
+<h4 id="orgheadline22">Using with Ubuntu</h4>
768 
+<div class="outline-text-4" id="text-orgheadline22">
733 769 
 <p>
734 770 
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
735 771 
 </p>
 
@@ -747,17 +783,17 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
747 783 
 </p>
748 784 
 </div>
749 785 
 </div>
750 
-<div id="outline-container-orgheadline22" class="outline-4">
751 
-<h4 id="orgheadline22">Using Tor Messenger</h4>
752 
-<div class="outline-text-4" id="text-orgheadline22">
786 
+<div id="outline-container-orgheadline23" class="outline-4">
787 
+<h4 id="orgheadline23">Using Tor Messenger</h4>
788 
+<div class="outline-text-4" id="text-orgheadline23">
753 789 
 <p>
754 790 
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple.
755 791 
 </p>
756 792 
 </div>
757 793 
 </div>
758 
-<div id="outline-container-orgheadline23" class="outline-4">
759 
-<h4 id="orgheadline23">Using with Android</h4>
760 
-<div class="outline-text-4" id="text-orgheadline23">
794 
+<div id="outline-container-orgheadline24" class="outline-4">
795 
+<h4 id="orgheadline24">Using with Android</h4>
796 
+<div class="outline-text-4" id="text-orgheadline24">
761 797 
 <p>
762 798 
 Install <a href="https://f-droid.org/">F-Droid</a>
763 799 
 </p>
 
@@ -784,16 +820,16 @@ Go back to the initial screen and then using the menu you can add contacts and b
784 820 
 </div>
785 821 
 </div>
786 822 
 </div>
787 
-<div id="outline-container-orgheadline25" class="outline-3">
788 
-<h3 id="orgheadline25">Tox</h3>
789 
-<div class="outline-text-3" id="text-orgheadline25">
823 
+<div id="outline-container-orgheadline26" class="outline-3">
824 
+<h3 id="orgheadline26">Tox</h3>
825 
+<div class="outline-text-3" id="text-orgheadline26">
790 826 
 <p>
791 827 
 Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
792 828 
 </p>
793 829 
 </div>
794 
-<div id="outline-container-orgheadline26" class="outline-4">
795 
-<h4 id="orgheadline26">Using the Toxic client</h4>
796 
-<div class="outline-text-4" id="text-orgheadline26">
830 
+<div id="outline-container-orgheadline27" class="outline-4">
831 
+<h4 id="orgheadline27">Using the Toxic client</h4>
832 
+<div class="outline-text-4" id="text-orgheadline27">
797 833 
 <p>
798 834 
 To connect to your node use the command:
799 835 
 </p>
 
@@ -806,12 +842,12 @@ To connect to your node use the command:
806 842 
 </div>
807 843 
 </div>
808 844 
 </div>
809 
-<div id="outline-container-orgheadline29" class="outline-3">
810 
-<h3 id="orgheadline29">VoIP (Voice chat)</h3>
811 
-<div class="outline-text-3" id="text-orgheadline29">
812 
-</div><div id="outline-container-orgheadline27" class="outline-4">
813 
-<h4 id="orgheadline27">Using with Ubuntu</h4>
814 
-<div class="outline-text-4" id="text-orgheadline27">
845 
+<div id="outline-container-orgheadline30" class="outline-3">
846 
+<h3 id="orgheadline30">VoIP (Voice chat)</h3>
847 
+<div class="outline-text-3" id="text-orgheadline30">
848 
+</div><div id="outline-container-orgheadline28" class="outline-4">
849 
+<h4 id="orgheadline28">Using with Ubuntu</h4>
850 
+<div class="outline-text-4" id="text-orgheadline28">
815 851 
 <p>
816 852 
 Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
817 853 
 </p>
 
@@ -825,9 +861,9 @@ Click on "add new" to add a new server and enter the default domain name for the
825 861 
 </p>
826 862 
 </div>
827 863 
 </div>
828 
-<div id="outline-container-orgheadline28" class="outline-4">
829 
-<h4 id="orgheadline28">Using with Android</h4>
830 
-<div class="outline-text-4" id="text-orgheadline28">
864 
+<div id="outline-container-orgheadline29" class="outline-4">
865 
+<h4 id="orgheadline29">Using with Android</h4>
866 
+<div class="outline-text-4" id="text-orgheadline29">
831 867 
 <p>
832 868 
 Install <a href="https://f-droid.org/">F-Droid</a>
833 869 
 </p>
 
@@ -854,9 +890,9 @@ Selecting the server by pressing on it then connects you to the server so that y
854 890 
 </div>
855 891 
 </div>
856 892 
 </div>
857 
-<div id="outline-container-orgheadline30" class="outline-3">
858 
-<h3 id="orgheadline30">SIP phones</h3>
859 
-<div class="outline-text-3" id="text-orgheadline30">
893 
+<div id="outline-container-orgheadline31" class="outline-3">
894 
+<h3 id="orgheadline31">SIP phones</h3>
895 
+<div class="outline-text-3" id="text-orgheadline31">
860 896 
 <p>
861 897 
 Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
862 898 
 </p>