From 2b65809ad344770e185a9d45f7d89ff871c754a1 Mon Sep 17 00:00:00 2001 From: Michael Carbone Date: Thu, 20 Oct 2016 19:28:12 +0200 Subject: [PATCH 1/2] removed gendered language --- security/split-gpg.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/security/split-gpg.md b/security/split-gpg.md index 03bf6b51..719b1c35 100644 --- a/security/split-gpg.md +++ b/security/split-gpg.md @@ -258,9 +258,9 @@ In this example, the following keys are stored in the following locations leave the `vault` VM, so it is extremely unlikely ever to be obtained by an adversary (see below). Second, an adversary who *does* manage to obtain the master secret key either possesses the passphrase to unlock the key - (if one is used), or he does not. If he does, then he can simply use + (if one is used), or they do not. If they do, then they can simply use the passphrase in order to legally extend the expiration date of the key - (or remove it entirely). If he does not, then he cannot use the key at + (or remove it entirely). If they do not, then they cannot use the key at all. In either case, an expiration date provides no additional benefit. By the same token, however, having a passphrase on the key is of little From 37b9e3c3613bdb1250e08753e3e87ace1c2cbbc0 Mon Sep 17 00:00:00 2001 From: Andrew David Wong Date: Thu, 20 Oct 2016 16:15:31 -0700 Subject: [PATCH 2/2] Rewrite to avoid pronouns entirely --- security/split-gpg.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/security/split-gpg.md b/security/split-gpg.md index 719b1c35..53e8555d 100644 --- a/security/split-gpg.md +++ b/security/split-gpg.md @@ -258,10 +258,11 @@ In this example, the following keys are stored in the following locations leave the `vault` VM, so it is extremely unlikely ever to be obtained by an adversary (see below). Second, an adversary who *does* manage to obtain the master secret key either possesses the passphrase to unlock the key - (if one is used), or they do not. If they do, then they can simply use - the passphrase in order to legally extend the expiration date of the key - (or remove it entirely). If they do not, then they cannot use the key at - all. In either case, an expiration date provides no additional benefit. + (if one is used) or does not. An adversary who *does* possess the passphrase + can simply use it to legally extend the expiration date of the key + (or remove it entirely). An adversary who does *not* possess the passphrase + cannot use the key at all. In either case, an expiration date provides no + additional benefit. By the same token, however, having a passphrase on the key is of little value. An adversary who is capable of stealing the key from your `vault`