[authorization-file]

# The "file" authorization method writes the challenge code to a file instead
# of sending it anywhere.  It exists for TESTING (and for exercising user
# interfaces such as anastasis-gtk); anyone able to read the file can pass the
# challenge, so do not enable it on a production provider.

# Set to 'YES' to enable (must then also specify 'COST')
ENABLED = NO

# Set recovery cost:
# COST =

# Directory the challenge files are written to.  Nothing outside this
# directory can be written: the file name comes from the (client-supplied)
# truth data, and a name that escapes the directory is refused.
#
# The default is $TMPDIR/anastasis-file-challenges, which is a predictable
# name in a shared directory: on a multi-user host, point this somewhere only
# the provider can read.
# DIRECTORY = /var/lib/anastasis/file-challenges
