christofferholmstedt / bachelor-thesis-use-of-dane-in-identity-fedeartions Goto Github PK

References to DANE draft and other RFC drafts need an update clearly stating that it's "Work in progress".

"Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress.""

...university’s log in page and signs... change "log in" to "login"
...this theses... change "theses" to "thesis" (?)

..."The SAML ”standard defines an XML-based
framework for describing and exchanging security information between on-line business
partners” [11, p. 8]." ...Detta känns ihopklämt på ett konstigt sätt kanske ändra till något så som "According to XYZ(referens) the purpose with SAML is to ABC"

..."(key information or public keys)" change "or" to "and"

..."Federation Operator" or "Federation provider"?

..."The FO is not apart of the SAML" change "apart" to "a part"

..."on request in order to have the user log in" change "log in" to "login" (?)

..." The Web Browser SSO Profile that stats that" change "stats" to "says"

..."descirbed" misspelled

..." user agent deliver to the IdP through an HTTP redirect, post or artifact binding" not sure if "artifact binding" should be listed here. (?)

..."LDAP Lightweight Directory Access Protocol" change to "some back-end engine with user credentials, in our testing environment we used the Lightweight Directory Access Protocol (LDAP)"

..."not a redirect binding since the response most often is longer than the URL permitted by most user agents." is this correct. I assume it's still a redirect but instead of using the GET values the SAML message is sent as a POST message. But that is perhaps what this is saying.

..."...least one authentication assertion and fallows with the client receiving..." what is the meaning of this sentence?

CERTIFICATES
SAML2 säger att man måste använda SSL/TLS men vad säger Web SSO profile?

Allmänt långa citat som gör det svårt att följa vad det hela handlar om.

Write a proper installation guide for Bind 9 on Ubuntu 11.10 or 12.04 when it can be tested step by step on a new machine.

Write a proper OpenDNSSEC installation, configuration and usage guide when a virtual machine is available to test all steps on.

New information has been given today. Re-write chapter 3 and 4 when the new information about s/mime and it's dilemmas has been fully understood.

Write a proper SoftHSM installation, configuration and usage guide when a virtual machine is available to test all steps on.

"A TLS/SSL handshake example adapted to the identity federation influenced by [17]"

Add the name of the reference for better flow in the text.

Short text about what next step is about identity federations and DANE

1. Next step is DANE with TLS for clients (and servers) because this is the first draft that will reach RFC standard.

"the validation of Alice and Bob with the help of a signed certificates and is based on[15]"

Add the name on the reference aswell for better flow in the text.

With the new added subsubsection section references does not work any longer to these subsubsections.

"...Alice can encrypt the private message with the public key and only Bob with the private key can decrypt the message."

Need to make it clear that it's Bob's public key that is used in this scenario.

https://github.com/christofferholmstedt/BachelorThesis/commit/ca14aa8e4f981a80d6c92011d94dec1898fb0cf7

Merged some old edits to master...might not be complete. Need proper review.

Abstract

• Språk

Preface

• Språk

1.1 Background

• A new solution will be built upon the concept of identity federations. Förklara med om elegnämnden.

1.4

• Språk

2.1

• Språk
• Lägg till eventuell ändring om hur vi har använt testmiljön

3

• Bra skrivet

4

• Bra skrivet

5

• Vi säger vad vi "tycker"...mer uppbyggnad behövs.

5.1.1.
We belive that it is this initial sharing of information that would benefit
the most if it could be done solely over the internet and it’s possible if we put trust in
the DNSSEC infrastructure

Bygg vidare med tydligare diskussion.

Furthermore, our belief is that within future SAML specifications and/or when estab-
lishing new federations, more strict rules concerning metadata must be agreed upon to
secure the data integrity of the metadata.

Fixa till och säg att vidare arbete behövs.

Write that this part is form Leif.