docs(ssh): SSH-first setup path as a peer of the token path #348

Merged

hexajon merged 2 commits from issue-299-ssh-first-setup-docs into main

2026-07-22 18:36:24 +00:00

hexajon commented

2026-07-22 18:36:07 +00:00

(Migrated from codeberg.org)

Summary

The setup guide gains an SSH-first section of equal standing with the token path: choosing a protocol mode at login (https / ssh / ssh-only), what the SSH preflight checks (usable key, known_hosts TOFU fingerprint steer, identity probe), and what works token-less versus what degrades. The ssh-only degradation is documented with the verbatim typed error text, the pure-git vs API-dependent split is stated plainly, and the security rationale is given with its counterweights (TOFU is the weak point; madtea guards token storage but cannot guard a passphrase-less key file). COMPARISON/COMPAT were reasoned as already-covered. A --token passed in ssh-only is documented as ignored, not rejected.

Closes #299.

Closes #299

## Summary The setup guide gains an SSH-first section of equal standing with the token path: choosing a protocol mode at login (https / ssh / ssh-only), what the SSH preflight checks (usable key, known_hosts TOFU fingerprint steer, identity probe), and what works token-less versus what degrades. The ssh-only degradation is documented with the verbatim typed error text, the pure-git vs API-dependent split is stated plainly, and the security rationale is given with its counterweights (TOFU is the weak point; madtea guards token storage but cannot guard a passphrase-less key file). COMPARISON/COMPAT were reasoned as already-covered. A --token passed in ssh-only is documented as ignored, not rejected. Closes #299. Closes #299

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

sixfold-space/madtea!348

No description provided.

Rows
Columns