aboutsummaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2008-04-26 01:45:34 +0000
committerRob Austein <sra@hactrn.net>2008-04-26 01:45:34 +0000
commite3ed2ebb124afce12769a55e14d5c9ee7bf71261 (patch)
tree0a5c38e766ad13701e25d7d49ec909a3898d1050 /docs
parent864151902a2cf5f873bd8b8c027a765f610fd423 (diff)
Better color coding.
svn path=/docs/bpki.dot; revision=1710
Diffstat (limited to 'docs')
-rw-r--r--docs/bpki.dot111
-rw-r--r--docs/bpki.pdfbin7436 -> 7456 bytes
2 files changed, 61 insertions, 50 deletions
diff --git a/docs/bpki.dot b/docs/bpki.dot
index 6ced8cf6..d2cc8424 100644
--- a/docs/bpki.dot
+++ b/docs/bpki.dot
@@ -1,34 +1,39 @@
// $Id$
//
+// Pictures to show why I prefer the symmetric BPKI model. As far as
+// I can tell, the asymmetric model is every bit as complex for me as
+// the symmetric model; the only difference is the added annoyance of
+// having to keep track of a larger number of BSC EE certificates.
+//
// Color code:
-// Black: hosting entity
-// Blue: hosted entity
-// Red: cross-certified peer
+// Black: Hosting entity
+// Blue: Hosted entity
+// Red: Cross-certified peer
//
// Shape code:
-// Octagon: TA
-// Diamond: CA
-// Record: EE
+// Octagon: TA
+// Diamond: CA
+// Record: EE
digraph bpki_symmetric {
- rotate=90; size="11,8.5"; splines=true; ratio=fill;
+ rotate = 90; size = "11,8.5"; splines = true; ratio = fill;
// Hosting entity
- node [ color=black, shape=record ];
- TA [ shape=octagon ];
- rpkid [ label="rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
- irdbd [ label="irdbd|{HTTPS left-right server|CMS left-right}" ];
- irbe [ label="IRBE|{HTTPS left-right client|CMS left-right}" ];
+ node [ color = black, shape = record ];
+ TA [ shape = octagon ];
+ rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
+ irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ];
+ irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ];
// Hosted entities
- node [ color=blue ];
- Alice_CA [ shape=diamond ];
- Alice_EE [ label="Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_CA [ shape=diamond ];
- Ellen_EE [ label="Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ node [ color = blue, fontcolor = blue ];
+ Alice_CA [ shape = diamond ];
+ Alice_EE [ label = "Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_CA [ shape = diamond ];
+ Ellen_EE [ label = "Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
// Peers
- node [ color=red, shape=diamond ];
+ node [ color = red, fontcolor = red, shape = diamond ];
Bob_CA;
Carol_CA;
Dave_CA;
@@ -36,41 +41,45 @@ digraph bpki_symmetric {
Ginny_CA;
Harry_CA;
- edge [ color=black ];
+ edge [ color = black, style = solid ];
+ TA -> Alice_CA;
+ TA -> Ellen_CA;
+
+ edge [ color = black, style = dashed ];
TA -> rpkid;
TA -> irdbd;
TA -> irbe;
- TA -> Alice_CA;
- TA -> Ellen_CA;
- edge [ color=blue ];
- Alice_CA -> Alice_EE;
+ edge [ color = blue, style = solid ];
Alice_CA -> Bob_CA;
Alice_CA -> Carol_CA;
Alice_CA -> Dave_CA;
- Ellen_CA -> Ellen_EE;
Ellen_CA -> Frank_CA;
Ellen_CA -> Ginny_CA;
Ellen_CA -> Harry_CA;
+
+ edge [ color = blue, style = dashed ]
+ Alice_CA -> Alice_EE;
+ Ellen_CA -> Ellen_EE;
}
digraph bpki_asymmetric {
- rotate=90; size="11,8.5"; splines=true; ratio=fill;
+ rotate = 90; size = "11,8.5"; splines = true; ratio = fill;
// Hosting entity
- node [ color=black, shape=record ];
- TA [ shape=octagon ];
- rpkid [ label="rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
- irdbd [ label="irdbd|{HTTPS left-right server|CMS left-right}" ];
- irbe [ label="IRBE|{HTTPS left-right client|CMS left-right}" ];
+ node [ color = black, shape = record ];
+ TA [ shape = octagon ];
+ rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
+ irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ];
+ irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ];
// Hosted entities
- node [ color=blue ];
- Alice_CA [ shape=diamond ];
- Ellen_CA [ shape=diamond ];
+ node [ color = blue, fontcolor = blue ];
+ Alice_CA [ shape = diamond ];
+ Ellen_CA [ shape = diamond ];
// Peers
- node [ color=red, shape=diamond ];
+ node [ color = red, fontcolor = red, shape = diamond ];
Bob_CA;
Carol_CA;
Dave_CA;
@@ -79,22 +88,24 @@ digraph bpki_asymmetric {
Harry_CA;
// EE certs issued to us by peers
- node [ color=red, shape=record ];
- Alice_Bob_EE [ label="Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Alice_Carol_EE [ label="Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Alice_Dave_EE [ label="Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Frank_EE [ label="Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Ginny_EE [ label="Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Harry_EE [ label="Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
-
- edge [ color=black ];
+ node [ color = red, fontcolor = red, shape = record ];
+ Alice_Bob_EE [ label = "Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Alice_Carol_EE [ label = "Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Alice_Dave_EE [ label = "Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Frank_EE [ label = "Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Ginny_EE [ label = "Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Harry_EE [ label = "Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+
+ edge [ color = black, style = solid ];
+ TA -> Alice_CA;
+ TA -> Ellen_CA;
+
+ edge [ color = black, style = dashed ];
TA -> rpkid;
TA -> irdbd;
TA -> irbe;
- TA -> Alice_CA;
- TA -> Ellen_CA;
- edge [ color=blue ];
+ edge [ color = blue, style = solid ];
Alice_CA -> Bob_CA;
Alice_CA -> Carol_CA;
Alice_CA -> Dave_CA;
@@ -102,11 +113,11 @@ digraph bpki_asymmetric {
Ellen_CA -> Ginny_CA;
Ellen_CA -> Harry_CA;
- edge [ color=red ];
- Bob_CA -> Alice_Bob_EE;
+ edge [ color = red, style = dashed ];
+ Bob_CA -> Alice_Bob_EE;
Carol_CA -> Alice_Carol_EE;
- Dave_CA -> Alice_Dave_EE;
+ Dave_CA -> Alice_Dave_EE;
Frank_CA -> Ellen_Frank_EE;
Ginny_CA -> Ellen_Ginny_EE;
Harry_CA -> Ellen_Harry_EE;
-} \ No newline at end of file
+}
diff --git a/docs/bpki.pdf b/docs/bpki.pdf
index 037403ee..c85acb29 100644
--- a/docs/bpki.pdf
+++ b/docs/bpki.pdf
Binary files differ