diff options
author | Rob Austein <sra@hactrn.net> | 2008-04-26 01:45:34 +0000 |
---|---|---|
committer | Rob Austein <sra@hactrn.net> | 2008-04-26 01:45:34 +0000 |
commit | e3ed2ebb124afce12769a55e14d5c9ee7bf71261 (patch) | |
tree | 0a5c38e766ad13701e25d7d49ec909a3898d1050 /docs | |
parent | 864151902a2cf5f873bd8b8c027a765f610fd423 (diff) |
Better color coding.
svn path=/docs/bpki.dot; revision=1710
Diffstat (limited to 'docs')
-rw-r--r-- | docs/bpki.dot | 111 | ||||
-rw-r--r-- | docs/bpki.pdf | bin | 7436 -> 7456 bytes |
2 files changed, 61 insertions, 50 deletions
diff --git a/docs/bpki.dot b/docs/bpki.dot index 6ced8cf6..d2cc8424 100644 --- a/docs/bpki.dot +++ b/docs/bpki.dot @@ -1,34 +1,39 @@ // $Id$ // +// Pictures to show why I prefer the symmetric BPKI model. As far as +// I can tell, the asymmetric model is every bit as complex for me as +// the symmetric model; the only difference is the added annoyance of +// having to keep track of a larger number of BSC EE certificates. +// // Color code: -// Black: hosting entity -// Blue: hosted entity -// Red: cross-certified peer +// Black: Hosting entity +// Blue: Hosted entity +// Red: Cross-certified peer // // Shape code: -// Octagon: TA -// Diamond: CA -// Record: EE +// Octagon: TA +// Diamond: CA +// Record: EE digraph bpki_symmetric { - rotate=90; size="11,8.5"; splines=true; ratio=fill; + rotate = 90; size = "11,8.5"; splines = true; ratio = fill; // Hosting entity - node [ color=black, shape=record ]; - TA [ shape=octagon ]; - rpkid [ label="rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ]; - irdbd [ label="irdbd|{HTTPS left-right server|CMS left-right}" ]; - irbe [ label="IRBE|{HTTPS left-right client|CMS left-right}" ]; + node [ color = black, shape = record ]; + TA [ shape = octagon ]; + rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ]; + irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ]; + irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ]; // Hosted entities - node [ color=blue ]; - Alice_CA [ shape=diamond ]; - Alice_EE [ label="Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Ellen_CA [ shape=diamond ]; - Ellen_EE [ label="Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + node [ color = blue, fontcolor = blue ]; + Alice_CA [ shape = diamond ]; + Alice_EE [ label = "Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Ellen_CA [ shape = diamond ]; + Ellen_EE [ label = "Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; // Peers - node [ color=red, shape=diamond ]; + node [ color = red, fontcolor = red, shape = diamond ]; Bob_CA; Carol_CA; Dave_CA; @@ -36,41 +41,45 @@ digraph bpki_symmetric { Ginny_CA; Harry_CA; - edge [ color=black ]; + edge [ color = black, style = solid ]; + TA -> Alice_CA; + TA -> Ellen_CA; + + edge [ color = black, style = dashed ]; TA -> rpkid; TA -> irdbd; TA -> irbe; - TA -> Alice_CA; - TA -> Ellen_CA; - edge [ color=blue ]; - Alice_CA -> Alice_EE; + edge [ color = blue, style = solid ]; Alice_CA -> Bob_CA; Alice_CA -> Carol_CA; Alice_CA -> Dave_CA; - Ellen_CA -> Ellen_EE; Ellen_CA -> Frank_CA; Ellen_CA -> Ginny_CA; Ellen_CA -> Harry_CA; + + edge [ color = blue, style = dashed ] + Alice_CA -> Alice_EE; + Ellen_CA -> Ellen_EE; } digraph bpki_asymmetric { - rotate=90; size="11,8.5"; splines=true; ratio=fill; + rotate = 90; size = "11,8.5"; splines = true; ratio = fill; // Hosting entity - node [ color=black, shape=record ]; - TA [ shape=octagon ]; - rpkid [ label="rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ]; - irdbd [ label="irdbd|{HTTPS left-right server|CMS left-right}" ]; - irbe [ label="IRBE|{HTTPS left-right client|CMS left-right}" ]; + node [ color = black, shape = record ]; + TA [ shape = octagon ]; + rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ]; + irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ]; + irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ]; // Hosted entities - node [ color=blue ]; - Alice_CA [ shape=diamond ]; - Ellen_CA [ shape=diamond ]; + node [ color = blue, fontcolor = blue ]; + Alice_CA [ shape = diamond ]; + Ellen_CA [ shape = diamond ]; // Peers - node [ color=red, shape=diamond ]; + node [ color = red, fontcolor = red, shape = diamond ]; Bob_CA; Carol_CA; Dave_CA; @@ -79,22 +88,24 @@ digraph bpki_asymmetric { Harry_CA; // EE certs issued to us by peers - node [ color=red, shape=record ]; - Alice_Bob_EE [ label="Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Alice_Carol_EE [ label="Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Alice_Dave_EE [ label="Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Ellen_Frank_EE [ label="Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Ellen_Ginny_EE [ label="Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - Ellen_Harry_EE [ label="Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; - - edge [ color=black ]; + node [ color = red, fontcolor = red, shape = record ]; + Alice_Bob_EE [ label = "Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Alice_Carol_EE [ label = "Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Alice_Dave_EE [ label = "Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Ellen_Frank_EE [ label = "Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Ellen_Ginny_EE [ label = "Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + Ellen_Harry_EE [ label = "Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ]; + + edge [ color = black, style = solid ]; + TA -> Alice_CA; + TA -> Ellen_CA; + + edge [ color = black, style = dashed ]; TA -> rpkid; TA -> irdbd; TA -> irbe; - TA -> Alice_CA; - TA -> Ellen_CA; - edge [ color=blue ]; + edge [ color = blue, style = solid ]; Alice_CA -> Bob_CA; Alice_CA -> Carol_CA; Alice_CA -> Dave_CA; @@ -102,11 +113,11 @@ digraph bpki_asymmetric { Ellen_CA -> Ginny_CA; Ellen_CA -> Harry_CA; - edge [ color=red ]; - Bob_CA -> Alice_Bob_EE; + edge [ color = red, style = dashed ]; + Bob_CA -> Alice_Bob_EE; Carol_CA -> Alice_Carol_EE; - Dave_CA -> Alice_Dave_EE; + Dave_CA -> Alice_Dave_EE; Frank_CA -> Ellen_Frank_EE; Ginny_CA -> Ellen_Ginny_EE; Harry_CA -> Ellen_Harry_EE; -}
\ No newline at end of file +} diff --git a/docs/bpki.pdf b/docs/bpki.pdf Binary files differindex 037403ee..c85acb29 100644 --- a/docs/bpki.pdf +++ b/docs/bpki.pdf |