{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1068","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1068/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1068/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1068/events","html_url":"https://github.com/freedomofpress/securedrop/issues/1068","id":92700089,"number":1068,"title":"Rename keepass password entries","user":{"login":"dolanjs","id":1495205,"avatar_url":"https://avatars.githubusercontent.com/u/1495205?v=3","gravatar_id":"","url":"https://api.github.com/users/dolanjs","html_url":"https://github.com/dolanjs","followers_url":"https://api.github.com/users/dolanjs/followers","following_url":"https://api.github.com/users/dolanjs/following{/other_user}","gists_url":"https://api.github.com/users/dolanjs/gists{/gist_id}","starred_url":"https://api.github.com/users/dolanjs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dolanjs/subscriptions","organizations_url":"https://api.github.com/users/dolanjs/orgs","repos_url":"https://api.github.com/users/dolanjs/repos","events_url":"https://api.github.com/users/dolanjs/events{/privacy}","received_events_url":"https://api.github.com/users/dolanjs/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/freedomofpress/securedrop/labels/docs","name":"docs","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/freedomofpress/securedrop/milestones/5","html_url":"https://github.com/freedomofpress/securedrop/milestones/0.4","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/milestones/5/labels","id":691723,"number":5,"title":"0.4","description":"Issues for the next minor release of SecureDrop","creator":{"login":"garrettr","id":407302,"avatar_url":"https://avatars.githubusercontent.com/u/407302?v=3","gravatar_id":"","url":"https://api.github.com/users/garrettr","html_url":"https://github.com/garrettr","followers_url":"https://api.github.com/users/garrettr/followers","following_url":"https://api.github.com/users/garrettr/following{/other_user}","gists_url":"https://api.github.com/users/garrettr/gists{/gist_id}","starred_url":"https://api.github.com/users/garrettr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garrettr/subscriptions","organizations_url":"https://api.github.com/users/garrettr/orgs","repos_url":"https://api.github.com/users/garrettr/repos","events_url":"https://api.github.com/users/garrettr/events{/privacy}","received_events_url":"https://api.github.com/users/garrettr/received_events","type":"User","site_admin":false},"open_issues":58,"closed_issues":8,"state":"open","created_at":"2014-06-15T22:57:42Z","updated_at":"2015-07-28T00:13:41Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-07-02T18:18:47Z","updated_at":"2015-11-07T18:56:55Z","closed_at":null,"body":"The default width of the `Title` column in the provided keepass password database template can cut off some of the password entries names. A few of our entries start off with the same words. This can confuse a journalist leading them to copy and paste the wrong password into the document interface.\r\n\r\n### Similar values\r\n\r\n* In the journalist group\r\n  * `Document Interface` compared to `Document Interface Hidden Service`\r\n\r\n* In the Admin group\r\n  * `App and Monitor Server` compared to `App and Monitor SSH Key`\r\n  * `OSSEC email account` compared to `OSSEC gpg key`"},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/154738830","html_url":"https://github.com/freedomofpress/securedrop/issues/1068#issuecomment-154738830","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1068","id":154738830,"user":{"login":"conorsch","id":657862,"avatar_url":"https://avatars.githubusercontent.com/u/657862?v=3","gravatar_id":"","url":"https://api.github.com/users/conorsch","html_url":"https://github.com/conorsch","followers_url":"https://api.github.com/users/conorsch/followers","following_url":"https://api.github.com/users/conorsch/following{/other_user}","gists_url":"https://api.github.com/users/conorsch/gists{/gist_id}","starred_url":"https://api.github.com/users/conorsch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/conorsch/subscriptions","organizations_url":"https://api.github.com/users/conorsch/orgs","repos_url":"https://api.github.com/users/conorsch/repos","events_url":"https://api.github.com/users/conorsch/events{/privacy}","received_events_url":"https://api.github.com/users/conorsch/received_events","type":"User","site_admin":false},"created_at":"2015-11-07T18:56:55Z","updated_at":"2015-11-07T18:56:55Z","body":"Adding a readable list of the current KeePass XML template, as well as suggested changes, to facilitate discussion.\r\n\r\n### Admin\r\n* `App and Monitor Server` -> `Admin account username`\r\n* `App and Monitor Server SSH key` -> remove, since passphrase here is unnecessary\r\n* `App Server Hidden Service` -> `App Server SSH Onion URL` (necessary to add the auth cookies? they're in plaintext on the Admin Workstation anyway...)\r\n* `Monitor Server Hidden Service` -> `Monitor Server SSH Onion URL` (necessary to add the auth cookies? they're in plaintext on the Admin Workstation anyway...)\r\n* `Network firewall` -> `Network firewall admin credentials`\r\n* `OSSEC email account` -> `Email account for sending OSSEC alerts`\r\n* `OSSEC GPG key` -> remove, since passphrase is unnecessary here\r\n* `Personal GPG key` -> remove, since admins use GPG on their primary workstations\r\n* `SASL credentials` -> remove, since redundant with `OSSEC email account`\r\n\r\n### Journalist\r\n* `Document Interface` -> `Document Interface Onion URL`\r\n* `Document Interface Hidden Service` -> `Document Interface Hidden Service Auth Value` (seems clunky.. shouldn't the Admin back this up? Do Journalists need it in their own KeePass databases)?\r\n* `Personal GPG key`\r\n\r\n### Secure Viewing Station\r\n* `SecureDrop GPG key`\r\n\r\nIn general, the docs for setting up the KeePass database really need to be fleshed out. Right now, we're essentially saying \"fill it out and save it,\" with no further guidance. "}}