From feeb7c05dfe938828eef25366d46fccddd36c49e Mon Sep 17 00:00:00 2001 From: Mason Payne Date: Sun, 7 Jan 2024 15:10:10 -0700 Subject: [PATCH] add preface --- .idea/codeStyles/codeStyleConfig.xml | 5 +++++ Big Ideas/1-preface.md | 10 ++++++++++ Big Ideas/2-Authentication.md | 28 ++++++++++++++++++++++++++++ Big Ideas/Topics.md | 18 ++++++++++-------- 4 files changed, 53 insertions(+), 8 deletions(-) create mode 100644 .idea/codeStyles/codeStyleConfig.xml create mode 100644 Big Ideas/1-preface.md create mode 100644 Big Ideas/2-Authentication.md diff --git a/.idea/codeStyles/codeStyleConfig.xml b/.idea/codeStyles/codeStyleConfig.xml new file mode 100644 index 0000000..a55e7a1 --- /dev/null +++ b/.idea/codeStyles/codeStyleConfig.xml @@ -0,0 +1,5 @@ + + + + \ No newline at end of file diff --git a/Big Ideas/1-preface.md b/Big Ideas/1-preface.md new file mode 100644 index 0000000..a92ad0b --- /dev/null +++ b/Big Ideas/1-preface.md @@ -0,0 +1,10 @@ +# Preface + +*"A scout is Trustworthy"* + +-The first attribute of The Scout Law (Boy Scouts of America) + +In my college town, there was an auto shop called Honest-1 Auto Repair, I never once took my car to that auto shop. I didn't trust them. I have no idea if the shop was any good. but the whole idea of putting "Honest" in your name in order to make me trust you, immediately made me not trust them. In our society, we depend on trust. We trust our family members. We trust our friends. We trust that money will buy things. Human Society has always relied on trust. How do people earn our trust? How do we learn to trust others? How can we help them trust us? And most importantly, for the sake of this book, how do we trust others in an interconnected world when we communicate digitally? The answer is Authentication. Authentication is the act of providing proof something is true. Types of authentication we rely on today range from the keys to your house, to cryptographic keys to unlock a bank account, to the nuclear launch codes. Believe it or not, even our dogs authenticate us. + +My purpose in writing this book is to help system engineers and software engineers understand how to properly use authentication tools. I want to help them learn when to use different forms of authentication and when they are not required. My hope is that you take this book, highlight what stands out to you, write your own notes in the margin and use the worksheets provided to help you design the perfect authentication system for your projects and businesses. + diff --git a/Big Ideas/2-Authentication.md b/Big Ideas/2-Authentication.md new file mode 100644 index 0000000..fab6ec7 --- /dev/null +++ b/Big Ideas/2-Authentication.md @@ -0,0 +1,28 @@ +# Authentication + +## Identify who/what you need to authenticate + + + +## Identify who/what you need to authenticate to + +## Level of Confidence in your Authentication + +## How long should you trust an Authentication? + +## Authentication Design Worksheet + +1. Identify the users and systems you need to authenticate + +------------------------ + +2. Identify the users and systems you need to authenticate to answer number 1 + +------------------------ + +3. Decide the levels of confidence you need to establish between the two answers above + +------------------------ + +4. How long can I trust someone after they've authenticated? +------------------------ diff --git a/Big Ideas/Topics.md b/Big Ideas/Topics.md index 04352cd..8b768f8 100644 --- a/Big Ideas/Topics.md +++ b/Big Ideas/Topics.md @@ -1,13 +1,15 @@ # List of topics that this book can cover -1. [Authentication](./Authentication.md) -2. [Authorization](./Authorization.md) -3. [OAuth](./OAuth.md) -4. [OpenID](./OpenID.md) -5. [SAML](./SAML.md) -6. [JWT](./JWT.md) -7. [SAML vs OAuth vs OpenID](./SAML%20vs%20OAuth%20vs%20OpenID.md) -8. [OAuth vs OpenID](./OAuth%20vs%20OpenID.md) +1. [Preface - "A scout is Trustworthy"](./1-preface.md) +1. [Authentication](./2-Authentication.md) +1. [Authorization](./Authorization.md) +1. [Audit/Accountability](./audit.md) +1. [OAuth](./OAuth.md) +1. [OpenID](./OpenID.md) +1. [SAML](./SAML.md) +1. [JWT](./JWT.md) +1. [SAML vs OAuth vs OpenID](./SAML%20vs%20OAuth%20vs%20OpenID.md) +1. [OAuth vs OpenID](./OAuth%20vs%20OpenID.md) ## Questions I need to answer before attempting to write this book