aboutsummaryrefslogtreecommitdiff
path: root/docs/bpki.dot
diff options
context:
space:
mode:
Diffstat (limited to 'docs/bpki.dot')
-rw-r--r--docs/bpki.dot123
1 files changed, 0 insertions, 123 deletions
diff --git a/docs/bpki.dot b/docs/bpki.dot
deleted file mode 100644
index d2cc8424..00000000
--- a/docs/bpki.dot
+++ /dev/null
@@ -1,123 +0,0 @@
-// $Id$
-//
-// Pictures to show why I prefer the symmetric BPKI model. As far as
-// I can tell, the asymmetric model is every bit as complex for me as
-// the symmetric model; the only difference is the added annoyance of
-// having to keep track of a larger number of BSC EE certificates.
-//
-// Color code:
-// Black: Hosting entity
-// Blue: Hosted entity
-// Red: Cross-certified peer
-//
-// Shape code:
-// Octagon: TA
-// Diamond: CA
-// Record: EE
-
-digraph bpki_symmetric {
- rotate = 90; size = "11,8.5"; splines = true; ratio = fill;
-
- // Hosting entity
- node [ color = black, shape = record ];
- TA [ shape = octagon ];
- rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
- irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ];
- irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ];
-
- // Hosted entities
- node [ color = blue, fontcolor = blue ];
- Alice_CA [ shape = diamond ];
- Alice_EE [ label = "Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_CA [ shape = diamond ];
- Ellen_EE [ label = "Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
-
- // Peers
- node [ color = red, fontcolor = red, shape = diamond ];
- Bob_CA;
- Carol_CA;
- Dave_CA;
- Frank_CA;
- Ginny_CA;
- Harry_CA;
-
- edge [ color = black, style = solid ];
- TA -> Alice_CA;
- TA -> Ellen_CA;
-
- edge [ color = black, style = dashed ];
- TA -> rpkid;
- TA -> irdbd;
- TA -> irbe;
-
- edge [ color = blue, style = solid ];
- Alice_CA -> Bob_CA;
- Alice_CA -> Carol_CA;
- Alice_CA -> Dave_CA;
- Ellen_CA -> Frank_CA;
- Ellen_CA -> Ginny_CA;
- Ellen_CA -> Harry_CA;
-
- edge [ color = blue, style = dashed ]
- Alice_CA -> Alice_EE;
- Ellen_CA -> Ellen_EE;
-}
-
-digraph bpki_asymmetric {
- rotate = 90; size = "11,8.5"; splines = true; ratio = fill;
-
- // Hosting entity
- node [ color = black, shape = record ];
- TA [ shape = octagon ];
- rpkid [ label = "rpkid|{HTTPS server|HTTPS left-right client|CMS left-right}" ];
- irdbd [ label = "irdbd|{HTTPS left-right server|CMS left-right}" ];
- irbe [ label = "IRBE|{HTTPS left-right client|CMS left-right}" ];
-
- // Hosted entities
- node [ color = blue, fontcolor = blue ];
- Alice_CA [ shape = diamond ];
- Ellen_CA [ shape = diamond ];
-
- // Peers
- node [ color = red, fontcolor = red, shape = diamond ];
- Bob_CA;
- Carol_CA;
- Dave_CA;
- Frank_CA;
- Ginny_CA;
- Harry_CA;
-
- // EE certs issued to us by peers
- node [ color = red, fontcolor = red, shape = record ];
- Alice_Bob_EE [ label = "Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Alice_Carol_EE [ label = "Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Alice_Dave_EE [ label = "Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Frank_EE [ label = "Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Ginny_EE [ label = "Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Ellen_Harry_EE [ label = "Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
-
- edge [ color = black, style = solid ];
- TA -> Alice_CA;
- TA -> Ellen_CA;
-
- edge [ color = black, style = dashed ];
- TA -> rpkid;
- TA -> irdbd;
- TA -> irbe;
-
- edge [ color = blue, style = solid ];
- Alice_CA -> Bob_CA;
- Alice_CA -> Carol_CA;
- Alice_CA -> Dave_CA;
- Ellen_CA -> Frank_CA;
- Ellen_CA -> Ginny_CA;
- Ellen_CA -> Harry_CA;
-
- edge [ color = red, style = dashed ];
- Bob_CA -> Alice_Bob_EE;
- Carol_CA -> Alice_Carol_EE;
- Dave_CA -> Alice_Dave_EE;
- Frank_CA -> Ellen_Frank_EE;
- Ginny_CA -> Ellen_Ginny_EE;
- Harry_CA -> Ellen_Harry_EE;
-}