Put the executive summary on page 2, before the table of contents.
Some checks are pending
ci / markdown (push) Waiting to run
Some checks are pending
ci / markdown (push) Waiting to run
The cover stays page 1. Numbered chapters now start at What Verae provides. The TOC lists Executive summary at page 2.
This commit is contained in:
parent
5df7ed87d5
commit
8496ef8338
23 changed files with 759 additions and 723 deletions
|
|
@ -5,19 +5,19 @@
|
|||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
|
||||
<title>10. Architecture for an audit interview — Making yourself audit-ready with Verae DataCubes</title>
|
||||
<title>9. Architecture for an audit interview — Making yourself audit-ready with Verae DataCubes</title>
|
||||
<link rel="stylesheet" type="text/css" href="_static/pygments.css?v=5ecbeea2" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/basic.css?v=b08954a9" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/alabaster.css?v=2a97f0c7" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/verae.css?v=050b9d5b" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/verae.css?v=2d7b7068" />
|
||||
<script src="_static/documentation_options.js?v=250a654d"></script>
|
||||
<script src="_static/doctools.js?v=fd6eb6e6"></script>
|
||||
<script src="_static/sphinx_highlight.js?v=6ffebe34"></script>
|
||||
<link rel="icon" href="_static/VeraeFullLogo.png"/>
|
||||
<link rel="index" title="Index" href="genindex.html" />
|
||||
<link rel="search" title="Search" href="search.html" />
|
||||
<link rel="next" title="11. BAAs, DPAs, and ciphertext without host keys" href="baa-dpa.html" />
|
||||
<link rel="prev" title="9. Write-once Iceberg archive" href="iceberg-archive.html" />
|
||||
<link rel="next" title="10. BAAs, DPAs, and ciphertext without host keys" href="baa-dpa.html" />
|
||||
<link rel="prev" title="8. Write-once Iceberg archive" href="iceberg-archive.html" />
|
||||
|
||||
<link rel="stylesheet" href="_static/custom.css" type="text/css" />
|
||||
|
||||
|
|
@ -61,38 +61,37 @@
|
|||
<script>document.getElementById('searchbox').style.display = "block"</script><h3>Navigation</h3>
|
||||
<p class="caption" role="heading"><span class="caption-text">Contents</span></p>
|
||||
<ul class="current">
|
||||
<li class="toctree-l1"><a class="reference internal" href="executive.html">1. Executive summary</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="what-verae-provides.html">2. What Verae provides — and what it does not</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="datacube-server.html">3. The Verae DataCube Server Solution</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-in-transit.html">4. Secure communications — data in transit</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-at-rest.html">5. Encryption at rest — IPFS blocks and Peergos</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="timestamped-receipts.html">6. Global timestamped receipts</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="peergos-eu-evaluations.html">7. Peergos security evaluations in Europe</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="global-timestamping.html">8. Verae global timestamping — a cross-blockchain receipt</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="iceberg-archive.html">9. Write-once Iceberg archive</a></li>
|
||||
<li class="toctree-l1 current"><a class="current reference internal" href="#">10. Architecture for an audit interview</a><ul>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-picture">10.1. The picture</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#walkthrough-in-the-order-an-examiner-usually-asks">10.2. Walkthrough, in the order an examiner usually asks</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#identity-planes">10.3. Identity planes</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#nats-remains-untrusted">10.4. NATS remains untrusted</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#what-to-hand-the-examiner">10.5. What to hand the examiner</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="what-verae-provides.html">1. What Verae provides — and what it does not</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="datacube-server.html">2. The Verae DataCube Server Solution</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-in-transit.html">3. Secure communications — data in transit</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-at-rest.html">4. Encryption at rest — IPFS blocks and Peergos</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="timestamped-receipts.html">5. Global timestamped receipts</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="peergos-eu-evaluations.html">6. Peergos security evaluations in Europe</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="global-timestamping.html">7. Verae global timestamping — a cross-blockchain receipt</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="iceberg-archive.html">8. Write-once Iceberg archive</a></li>
|
||||
<li class="toctree-l1 current"><a class="current reference internal" href="#">9. Architecture for an audit interview</a><ul>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-picture">9.1. The picture</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#walkthrough-in-the-order-an-examiner-usually-asks">9.2. Walkthrough, in the order an examiner usually asks</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#identity-planes">9.3. Identity planes</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#nats-remains-untrusted">9.4. NATS remains untrusted</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#what-to-hand-the-examiner">9.5. What to hand the examiner</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="baa-dpa.html">11. BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="checklist.html">12. Audit-ready checklist</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="howto.html">13. How to use this briefing</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-james-garfinkel.html">14. James H. Garfinkel</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-stuart-haber.html">15. Stuart Haber</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-george-lambert.html">16. George Lambert</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="contact.html">17. Verae Inc — contact</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="baa-dpa.html">10. BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="checklist.html">11. Audit-ready checklist</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="howto.html">12. How to use this briefing</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-james-garfinkel.html">13. James H. Garfinkel</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-stuart-haber.html">14. Stuart Haber</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-george-lambert.html">15. George Lambert</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="contact.html">16. Verae Inc — contact</a></li>
|
||||
</ul>
|
||||
|
||||
<div class="relations">
|
||||
<h3>Related Topics</h3>
|
||||
<ul>
|
||||
<li><a href="index.html">Documentation overview</a><ul>
|
||||
<li>Previous: <a href="iceberg-archive.html" title="previous chapter"><span class="section-number">9. </span>Write-once Iceberg archive</a></li>
|
||||
<li>Next: <a href="baa-dpa.html" title="next chapter"><span class="section-number">11. </span>BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
<li>Previous: <a href="iceberg-archive.html" title="previous chapter"><span class="section-number">8. </span>Write-once Iceberg archive</a></li>
|
||||
<li>Next: <a href="baa-dpa.html" title="next chapter"><span class="section-number">10. </span>BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
</ul></li>
|
||||
</ul>
|
||||
</div>
|
||||
|
|
@ -113,9 +112,9 @@
|
|||
<div class="body" role="main">
|
||||
|
||||
<section id="architecture-for-an-audit-interview">
|
||||
<h1><span class="section-number">10. </span>Architecture for an audit interview<a class="headerlink" href="#architecture-for-an-audit-interview" title="Link to this heading">¶</a></h1>
|
||||
<h1><span class="section-number">9. </span>Architecture for an audit interview<a class="headerlink" href="#architecture-for-an-audit-interview" title="Link to this heading">¶</a></h1>
|
||||
<section id="the-picture">
|
||||
<h2><span class="section-number">10.1. </span>The picture<a class="headerlink" href="#the-picture" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">9.1. </span>The picture<a class="headerlink" href="#the-picture" title="Link to this heading">¶</a></h2>
|
||||
<div class="highlight-default notranslate"><div class="highlight"><pre><span></span><span class="n">Endpoint</span> <span class="p">(</span><span class="n">private</span> <span class="n">keys</span> <span class="n">stay</span> <span class="n">here</span> <span class="o">/</span> <span class="n">HSM</span><span class="p">)</span>
|
||||
<span class="o">|</span> <span class="n">HPKE</span> <span class="n">content</span> <span class="p">(</span><span class="n">point</span><span class="o">-</span><span class="n">to</span><span class="o">-</span><span class="n">point</span><span class="p">)</span>
|
||||
<span class="o">|</span> <span class="n">routing</span><span class="p">:</span> <span class="n">destination</span> <span class="o">+</span> <span class="n">subject</span> <span class="ow">in</span> <span class="n">the</span> <span class="n">clear</span>
|
||||
|
|
@ -142,7 +141,7 @@
|
|||
</div>
|
||||
</section>
|
||||
<section id="walkthrough-in-the-order-an-examiner-usually-asks">
|
||||
<h2><span class="section-number">10.2. </span>Walkthrough, in the order an examiner usually asks<a class="headerlink" href="#walkthrough-in-the-order-an-examiner-usually-asks" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">9.2. </span>Walkthrough, in the order an examiner usually asks<a class="headerlink" href="#walkthrough-in-the-order-an-examiner-usually-asks" title="Link to this heading">¶</a></h2>
|
||||
<p><strong>Where are the keys?</strong> On the endpoint or in the customer’s
|
||||
HSM. Not on the storage host. Not in the public-key
|
||||
directory (that directory holds public keys only). Not in
|
||||
|
|
@ -171,7 +170,7 @@ k-of-n officers. The author of a change is not an officer
|
|||
on that change. Log-before-reveal.</p>
|
||||
</section>
|
||||
<section id="identity-planes">
|
||||
<h2><span class="section-number">10.3. </span>Identity planes<a class="headerlink" href="#identity-planes" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">9.3. </span>Identity planes<a class="headerlink" href="#identity-planes" title="Link to this heading">¶</a></h2>
|
||||
<p>There are two login planes, and they must not be collapsed
|
||||
in an interview:</p>
|
||||
<ul class="simple">
|
||||
|
|
@ -185,7 +184,7 @@ cubes.</p></li>
|
|||
the master key.” It is not.</p>
|
||||
</section>
|
||||
<section id="nats-remains-untrusted">
|
||||
<h2><span class="section-number">10.4. </span>NATS remains untrusted<a class="headerlink" href="#nats-remains-untrusted" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">9.4. </span>NATS remains untrusted<a class="headerlink" href="#nats-remains-untrusted" title="Link to this heading">¶</a></h2>
|
||||
<p>The reference message fabric is NATS. It is an
|
||||
honest-but-curious broker. Destinations in the clear are
|
||||
<strong>passthrough</strong>, not a bug. Bodies are ciphertext, or the
|
||||
|
|
@ -195,7 +194,7 @@ identifiers, not payloads.</p>
|
|||
is not the same socket the internal services use.</p>
|
||||
</section>
|
||||
<section id="what-to-hand-the-examiner">
|
||||
<h2><span class="section-number">10.5. </span>What to hand the examiner<a class="headerlink" href="#what-to-hand-the-examiner" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">9.5. </span>What to hand the examiner<a class="headerlink" href="#what-to-hand-the-examiner" title="Link to this heading">¶</a></h2>
|
||||
<ul class="simple">
|
||||
<li><p>this document (HTML or PDF);</p></li>
|
||||
<li><p>the two public Peergos reports, labeled as component
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue