Security

What is checked, where your key lives, and what runs on a box.

In this section

The local serverThe local server binds to loopback and needs a token.Read →
The controller keyWhere the signing key lives, and how to check it.Read →
Pairing and host keysHost keys are confirmed once and never learned again.Read →
Signed intents and receiptsEvery command is signed, and so is every answer.Read →
On the boxWhat runs on the box, and as whom.Read →
Tokens for the relayKeep the relay and admin tokens in owner-only files.Read →
Unsigned downloadsCheck unsigned downloads against checksums.txt.Read →