7 years ago · 95acebdc94
--- a/doc/EN/faq.org
+++ b/doc/EN/faq.org
@@ -143,7 +143,7 @@ This system tries to block port scanners. Any other system trying to scan for op
 
				 * Should I upload my GPG keys to keybase.io?
			
 
				 It's not recommended unless there exists some compelling reason for you to be on there. That site asks users to upload the *private keys*, and even if the keys are client side encrypted with a passphrase there's always the chance that there will be a data leak in future and letter agencies will then have a full time opportunity to crack the passphrases.
			
 
				 
			
 
				-Saying something resembling /"only noobs will use crackable private key passphrases"/ isn't good enough. A passphrase should not be considered to be a substitute for a private key.
			
 
				+Saying something resembling "/only noobs will use crackable private key passphrases/" isn't good enough. A passphrase should not be considered to be a substitute for a private key.
			
 
				 * Keys and emails should not be stored on servers. Why do you do that?
			
 
				 Ordinarily this is good advice. However, the threat model for a device in your home is different from the one for a generic server in a massive warehouse. Compare and contrast:
			
 
				 
			
--- a/website/EN/faq.html
+++ b/website/EN/faq.html
@@ -4,7 +4,7 @@
 
				 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
			
 
				 <head>
			
 
				 <title></title>
			
 
				-<!-- 2018-06-16 Sat 21:22 -->
			
 
				+<!-- 2018-06-16 Sat 21:40 -->
			
 
				 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
			
 
				 <meta  name="generator" content="Org-mode" />
			
 
				 <meta  name="author" content="Bob Mottram" />
			
@@ -542,7 +542,7 @@ It's not recommended unless there exists some compelling reason for you to be on
 
				 </p>
			
 
				 
			
 
				 <p>
			
 
				-Saying something resembling /"only noobs will use crackable private key passphrases"/ isn't good enough. A passphrase should not be considered to be a substitute for a private key.
			
 
				+Saying something resembling "<i>only noobs will use crackable private key passphrases</i>" isn't good enough. A passphrase should not be considered to be a substitute for a private key.
			
 
				 </p>
			
 
				 </div>
			
 
				 </div>