Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add asymmetrical connectivity use cases #54

Merged
merged 2 commits into from
Dec 9, 2019
Merged

Conversation

zenomt
Copy link
Contributor

@zenomt zenomt commented Nov 24, 2019

per request from @elf-pavlik

@zenomt zenomt mentioned this pull request Nov 24, 2019
@bblfish
Copy link
Contributor

bblfish commented Nov 25, 2019

I wonder if these can or should really be use cases.

It would rule out many things:

  • OAuth: How would you deal with a personal OAuth or OpenID server that was not available on the web
  • TLS: how would it be possible to access Certificate Revocation Lists (CRL?) without them.
  • DANE: allows one to tie a certificate to the DNS, to avoid or complement CAs. This would be ruled out by such a use case.

We are trying to build a deccentralised system of authentication for the open web here. Closed systems will obviously have problems. In the case of X509 it works because the browser ship some Root certificates to all parties (though note the CRL problem) and in closed systems companies have to add extra certificates to each browser that may want to connect, which is very limiting and of course reduces the deployment to only large institutions.

@elf-pavlik
Copy link
Member

elf-pavlik commented Nov 25, 2019

Just to clarify, all Use Cases get added as 'for panel consideration'. I think as we consider them we can arrive at conclusion that we decide not to support some of them. Considerations happen across various issues and pull requests and IMO it helps to have all use cases clearly documented so we can reference them from all issues which we see them affecting.

UseCases.md Outdated
Comment on lines 54 to 56
- Alice uses or is developing http://localhost:8080 to view her photos
- Alice's Identity Provider can't reach Alice's `localhost:8080`
- Alice's Pod can't reach Alice's `localhost:8080`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This one doesn't seem to be as much of a use case as it is something to look out for. Would you like to phrase this as Alice should be able to test things out in a localhost setting?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's not just testing or developing. deployment to localhost should be a legitimate scenario. i'll rephrase in more generic terms (not "to view her photos" but "any app").

UseCases.md Outdated
Comment on lines 57 to 62
- Alice uses https://coolcode.int.enterprise.example to edit code stored in Customer Bob's Pod
- *CoolCode* is deployed behind Enterprise.Example's company firewall
- *CoolCode* is proprietary to Enterprise.Example; or
- *CoolCode* is a commercial product that is deployed on-premises at Enterprise.Example's datacenter
- Alice's Identity Provider can't reach https://coolcode.int.enterprise.example
- Customer Bob's Pod can't reach https://coolcode.int.enterprise.example
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same thing here. This should be phrased as a use case with a goal that Alice has to accomplish and not just a setup.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the intent here was to illustrate by example a possible and legitimate configuration of actors that should work, which is how all the other use cases work. i can rephrase this to more explicitly call out the intent to cover the configuration, and then give the example.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

note too that this use case already includes an implicit goal similar to all the other use cases: "Alice uses X to edit code stored in Customer Bob's Pod"

Copy link
Contributor

@jaxoncreed jaxoncreed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jaxoncreed jaxoncreed merged commit e883212 into solid:master Dec 9, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants