The audit catalogue's events for keys for hosts: a key a seat asks for, the person types into a card on the Mac, and the Mac's network guard puts into requests to the hosts named with it. The seat never sees it.
Keys for hosts
| Type | Reported by | When | Detail carries |
|---|---|---|---|
host_key.requested | Mac | A seat asked the person for a key for named hosts; the variable and the hosts, never a value. | name, hosts, speaker |
host_key.saved | Mac | The person saved a key for named hosts, from the card or Settings; it is kept encrypted on that Mac and seats get a stand-in. | name, hosts, kind, scope, replaced |
host_key.declined | Mac | The person chose not to give a key a seat asked for. | name, hosts |
host_key.withdrawn | Mac | A seat's request for a key ended unanswered: the run ended or was stopped. | name |
host_key.removed | Mac | A saved key was deleted from the Mac. | name, hosts |
host_key.offered | Mac | A run's commands were given the stand-ins of the keys that apply to it; once per run, names and hosts only. | names, hosts |
host_key.used | Mac | The network guard put a saved key into a request to one of its hosts; at most once an hour per key and host. | name, host, scope |
host_key.misplaced | Mac | A command sent a key's stand-in to a host the key is not for; the stand-in went out unchanged and carried nothing of value. | name, host |
host_key.not_sent | Mac | A saved key was not sent to its host: plain HTTP, a program that does not trust the guard, or the host unreachable. | host, reason |
host_key.root_made | Mac | The Mac made the certificate root its network guard signs keyed hosts' certificates with (first use, or the old one ran out). | fingerprint |
What these do not carry
A key is named by the variable it goes in and the hosts it is for, never by its value or any part of it. A use names the host, never the path, the request or the response. The key stays on the Mac, encrypted; nothing here comes from a copy of it anywhere else.
Mac: the app reported it.