Re: [Monotone-devel] private key needed for sync?

[Nathaniel Smith]

On Mon, Jun 27, 2005 at 04:53:20PM -0400, Hendrik Boom wrote:
> Brian Campbell wrote:
> > You need to have a key in the server so the client can make
> > sure it's connecting to the right server. Otherwise, someone
> > could set up a bogus server so when you sync to it, all of
> > your private code is sent to the malicious server.
> 
> How do you generate such a default signing key?
> The tutorial/manual says something like
>   monotone --db=~/database.db genkey address@hidden
> 
> But this generates a key for a specific person, somebody.
> How does one generate the default signing key for the server itself?

You just pick something.  The off.net server uses "address@hidden";
you can use whatever you like.  An email address that will get to the
server administrator might be good ("address@hidden"?).
Key names are just arbitrary strings (with some overly draconian rules
about what characters are allowed -- should fix this at some point),
and the use of email addresses is just a convention.

-- Nathaniel

-- 
Details are all that matters; God dwells there, and you never get to
see Him if you don't struggle to get them right. -- Stephen Jay Gould