mirror of
https://github.com/MacRimi/ProxMenux.git
synced 2026-07-26 18:38:30 +00:00
docs(glossary): drop stale /root/pbs-key.recovery-*.enc mention
The recovery envelope no longer lands in /root/ — code was cleaned up earlier this cycle to keep the keyfile and its envelope exclusively at /usr/local/share/proxmenux/. The glossary entries for "Recovery envelope" (EN) / "Sobre de recuperación" (ES) still described the /root/ mirror as an "offsite backup" / "respaldo local", which is now inaccurate. Removes the trailing sentence from both entries.
This commit is contained in:
@@ -38,7 +38,7 @@
|
||||
{
|
||||
"id": "sobre-recuperacion",
|
||||
"term": "Recovery envelope",
|
||||
"def": "The <a href=\"#clave-cifrado\">keyfile</a> wrapped in an extra layer: it is encrypted with the <a href=\"#passphrase-recuperacion\">recovery passphrase</a> using <a href=\"#aes-256-cbc\">AES-256-CBC</a> and <a href=\"#pbkdf2\">PBKDF2</a> before it ever leaves the host. It is what gets uploaded to PBS as the <code>-keyrecovery</code> group and what is also written to <code>/root/pbs-key.recovery-HOSTNAME-DATE.enc</code> as an offsite backup. Without the passphrase, the envelope is opaque: downloading it from PBS does not reveal the keyfile."
|
||||
"def": "The <a href=\"#clave-cifrado\">keyfile</a> wrapped in an extra layer: it is encrypted with the <a href=\"#passphrase-recuperacion\">recovery passphrase</a> using <a href=\"#aes-256-cbc\">AES-256-CBC</a> and <a href=\"#pbkdf2\">PBKDF2</a> before it ever leaves the host. It is what gets uploaded to PBS as the <code>-keyrecovery</code> group. Without the passphrase, the envelope is opaque: downloading it from PBS does not reveal the keyfile."
|
||||
},
|
||||
{
|
||||
"id": "cifrado-cliente",
|
||||
|
||||
@@ -42,7 +42,7 @@
|
||||
"id": "sobre-recuperacion",
|
||||
"term": "Sobre de recuperación",
|
||||
"also": "recovery envelope, escrow blob, pbs-key.recovery.enc",
|
||||
"def": "La propia <a href=\"#clave-cifrado\">clave de cifrado</a> envuelta en una capa adicional: se cifra con la <a href=\"#passphrase-recuperacion\">passphrase de recuperación</a> mediante <a href=\"#aes-256-cbc\">AES-256-CBC</a> y <a href=\"#pbkdf2\">PBKDF2</a> antes de salir del host. Es lo que se sube a PBS en el grupo <code>-keyrecovery</code> y lo que se guarda además en <code>/root/pbs-key.recovery-HOSTNAME-FECHA.enc</code> como respaldo local. Sin la passphrase, el sobre es opaco: descargarlo desde PBS no revela la clave."
|
||||
"def": "La propia <a href=\"#clave-cifrado\">clave de cifrado</a> envuelta en una capa adicional: se cifra con la <a href=\"#passphrase-recuperacion\">passphrase de recuperación</a> mediante <a href=\"#aes-256-cbc\">AES-256-CBC</a> y <a href=\"#pbkdf2\">PBKDF2</a> antes de salir del host. Es lo que se sube a PBS en el grupo <code>-keyrecovery</code>. Sin la passphrase, el sobre es opaco: descargarlo desde PBS no revela la clave."
|
||||
},
|
||||
{
|
||||
"id": "cifrado-cliente",
|
||||
|
||||
Reference in New Issue
Block a user