docs: rearranging home page index (#26)

asanvaq · web-flow · commit eb1a85954023 · 2025-11-27T16:12:24.000+01:00
---------

Signed-off-by: Anna Sancho Vaquer &lt;anna.sanchovaquer@canonical.com&gt;
diff --git a/docs/index.md b/docs/index.md
@@ -70,6 +70,6 @@ The Chisel project is sponsored by {{Canonical}}.
 
 Tutorial <tutorial/getting-started>
 how-to/index
-explanation/index
 reference/index
+explanation/index
 ```
diff --git a/docs/reference/security.md b/docs/reference/security.md
@@ -21,11 +21,9 @@ downloaded over HTTPS. Checksum of the tarball is not checked after downloading.
     download a release, Chisel reads the Etag from cache and checks whether the
     cache is still valid. If it is valid, the cached release YAMLs are used.
 
-1. Chisel downloads a few *InRelease* files from the [Ubuntu Archive
-but](http://archive.ubuntu.com) these files are never cached. The InRelease
-files are signed by GPG, and Chisel verifies[^3] the integrity using the [Ubuntu
-Archive Automatic Signing
-Key](https://keyserver.ubuntu.com/pks/lookup?search=f6ecb3762474eda9d21b7022871920d1991bc93c&fingerprint=on&op=index).[^4]
+1. Chisel downloads a few *InRelease* files from the [Ubuntu Archive](http://archive.ubuntu.com) but these files are never cached. The InRelease
+files are signed by GPG, and Chisel verifies[^3] the integrity using the <a href="https://keyserver.ubuntu.com/pks/lookup?search=f6ecb3762474eda9
+d21b7022871920d1991bc93c&fingerprint=on&op=index">Ubuntu Archive Automatic Signing Key</a>[^4].
 The key is specified in the [chisel.yaml in
 chisel-releases](https://github.com/canonical/chisel-releases/blob/a442b2e7208128df6366f859b7a858c0d3fce925/chisel.yaml#L47).
 The Go package [golang.org/x/crypto/openpgp](http://golang.org/x/crypto/openpgp)
@@ -61,9 +59,8 @@ to verify the signed InRelease files it downloads from the Ubuntu Archive. This
 file (chisel.yaml) is exposed to the user and Users can very much specify a
 different key on their forks. 
 
-The default public key in the official repository is the RSA/4096-bit [Ubuntu
-Archive Automatic Signing Key
-(2018)](https://keyserver.ubuntu.com/pks/lookup?search=f6ecb3762474eda9d21b7022871920d1991bc93c&fingerprint=on&op=index)
+The default public key in the official repository is the RSA/4096-bit <a href="https://keyserver.ubuntu.com/pks/lookup?search=f6ecb37624
+74eda9d21b7022871920d1991bc93c&fingerprint=on&op=index">Ubuntu Archive Automatic Signing Key (2018)</a> 
 with ID 871920D1991BC93C.
 
 ```
