Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide / link a tutorial. #1237

Open
nathan-at-least opened this issue Jul 25, 2022 · 0 comments
Open

Provide / link a tutorial. #1237

nathan-at-least opened this issue Jul 25, 2022 · 0 comments
Labels
kriskowal-review-2024-01 Issues that kriskowal wants to bring to the attention of the team for review as of January, 2024

Comments

@nathan-at-least
Copy link

The README of this repo doesn't explain how to use this technology.

From searching around issues, I found (via #332 (comment)) a link to https://ses-secure-ecmascript.readthedocs.io/en/stable/ which looks promising. However:

Here's what I'd like tutorial content on:

  • Which tech should I use if I want to develop a general JS app with good security properties? (In particular, I'm curious about evaluating potentially malicious user-submitted code?) Is that Endo or SES?
  • More broadly, how to Endo, SES, node, and agoric-sdk relate?
    • My guess is that agoric-sdk enables writing blockchain smart contracts atop Endo, but the latter is general purpose, right?
  • How do I install the right tech for developing my general JS app (no blockchain/smart contract stuff)?
  • How do I write & run a program that prints "hello world" to stdout or web console where the call site to print is confined, and there's explicit delegation of the authority for stdout/console.log?
  • How do I write dependencies with confinement? (Basic example, maybe it reverses strings, so that my new app + 1 dependency prints "!dlroW olleH" )
  • How do I use dependencies with confinement?
    • What are some symptoms I can see/expect if I try to use a dependency that violates confinement properties? (A tutorial of a simplified dependency which works in node but fails confinement in Endo would be helpful!)
    • If I am the dependency author, how can I rewrite the toy example to work with confinement?
    • If I am not the dependency author, how can I write a shim to use the dependency?
  • How do I write & run a basic distributed program? (Maybe a simple ping/pong protocol?)
  • Link to reference material (architecture, APIs, security properties, etc…)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kriskowal-review-2024-01 Issues that kriskowal wants to bring to the attention of the team for review as of January, 2024
Projects
None yet
Development

No branches or pull requests

2 participants