X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fprecautions.texi;h=20570b00aa528147d1c9eb783afd97c81d0577ac;hb=0e482169576b59168f44e509863e6b6acbca6f6d;hp=fbf45d13a4636b2315c7ec52f504362b53858e5c;hpb=9364defa689e91c6fb54651876fbf2d02eec35ec;p=govpn.git diff --git a/doc/precautions.texi b/doc/precautions.texi index fbf45d1..20570b0 100644 --- a/doc/precautions.texi +++ b/doc/precautions.texi @@ -3,10 +3,10 @@ @enumerate @item -We use password (passphrase) authentication, so overall security fully -depends on its strength. You @strong{should} use long, high-entropy -passphrases. Also remember to keep passphrase in temporary file and read -it securely as described in @ref{Verifier, verifier}. +We use passphrase authentication, so overall security fully depends on +its strength. You @strong{should} use long, high-entropy passphrases. +Also remember to keep passphrase in temporary file and read it securely +as described in @ref{Verifier, verifier}. @item You must @strong{never} use the same key for multiple clients. @@ -14,7 +14,7 @@ You must @strong{never} use the same key for multiple clients. @item You must use @strong{cryptographically good} pseudo random number generator. By default we use default @code{crypto/rand} library that -reads @code{/dev/urandom} source. Some GNU/Linux and FreeBSD systems +reads @file{/dev/urandom} source. Some GNU/Linux and FreeBSD systems are rather good with this entropy source. Closed proprietary ones are always not and you must use optional @ref{EGD} feature with them. @end enumerate