diff --git a/docs/sources/articles/https.md b/docs/sources/articles/https.md index a79e28a5d4..9e3835534e 100644 --- a/docs/sources/articles/https.md +++ b/docs/sources/articles/https.md @@ -107,11 +107,11 @@ two certificate signing requests: $ rm -v client.csr server.csr -With a default `umask` of 022 your secret keys will be *world-readable* and +With a default `umask` of 022, your secret keys will be *world-readable* and writable for you and your group. -To remove write permissions for your keys in order to protect them from accidental -damage and make them only readable to you issue the following file mode changes: +In order to protect your keys from accidental damage, you will want to remove their +write permissions. To make them read-only, change file modes as follows: $ chmod -v 0400 ca-key.pem key.pem server-key.pem