X-Git-Url: https://git-public.kairo.at/?p=slides.git;a=blobdiff_plain;f=fosdem2017%2Findex.html;h=8530779c3b6742e7f4603005cbcb81452e30d4d0;hp=b6421cd1e2127c65aff6709f03374320fa873ea2;hb=80b2a5a3bdf1f60c428fa737278ecd8c793527ed;hpb=1380deda08aa804bfe5354d1c700a7bcddf1c3ee

diff --git a/fosdem2017/index.html b/fosdem2017/index.html
index b6421cd..8530779 100755
--- a/fosdem2017/index.html
+++ b/fosdem2017/index.html
@@ -42,16 +42,16 @@
 <div class="simplebox">
 <mark><a href="http://home.kairo.at/">Robert Kaiser</a></mark>,
 "KaiRo" &lt;kairo@kairo.at&gt;
-<br><small>Mozilla Rep</small>
+<br><small>Mozilla Rep, Website developer &amp; Project Manager</small>
 </div>
 
 <div class="captionedbox">
 <p class="captionedbox-caption">Slides:
-  <a href="https://slides.kairo.at/fosdem2016/">https://slides.kairo.at/fosdem2017/</a></p>
+  <a href="https://slides.kairo.at/fosdem2017/">https://slides.kairo.at/fosdem2017/</a></p>
 <div class="captionedbox-content small">
 <ul class="small">
   <li>Created for
-    <a href="http://fosdem.org/2016/schedule/track/mozilla/">Mozilla
+    <a href="http://fosdem.org/2017/schedule/track/mozilla/">Mozilla
     Developer Room</a> at <a href="http://www.fosdem.org/">FOSDEM 2017</a> in
     Brussels.</li>
   <li>Written in HTML 5 with CSS 3 and JavaScript.</li>
@@ -60,18 +60,18 @@
   <li><a href="#toc">Contents</a></li>
   <li><a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/at/"><img
         alt="Licensed under CC-BY-SA," style="border-width:0;vertical-align:bottom;"
-        src="cc-by-sa-80x15.png"></a> 01/2017 Robert Kaiser.</li>
+        src="cc-by-sa-80x15.png"></a> 01-02/2017 Robert Kaiser.</li>
 </ul>
 </div>
 </div>
 </article>
 
 <article id="persona" title="What's Persona?">
-<h1>What <s>is</s>was Persona?</h1>
+<h1>What <s>is</s>was <mark>Persona</mark>?</h1>
 
 <div class="simplebox">
 <img src="persona-logo-wordmark.png" alt="Mozilla Persona" class="slidepic">
-<p>Login/Identity solution by Mozilla, 2011-2016</p>
+<p>Login/Identity solution by Mozilla, <mark>2011-2016</mark></p>
 <ul>
   <li>Decentralized / Federated (with Fallback)</li>
   <li>Multiple identities</li>
@@ -81,7 +81,7 @@
   <li>Permission-less</li>
 </ul>
 <p><a href="http://feeding.cloud.geek.nz/posts/persona-guiding-principles/">See
-blog post by François Marier</a></p>
+blog post by François Marier</a> (feeding.cloud.geek.nz)</p>
 </div>
 </article>
 
@@ -91,11 +91,11 @@ blog post by François Marier</a></p>
 <div class="simplebox">
 <img src="enter_access_code.jpg" alt="Enter Access Code" class="slidepic">
 <ul>
-  <li>Easy to implement</li>
-  <li>Trusted identification</li>
-  <li>Avoid dealing with how to secure passwords</li>
-  <li>No lock-in (identification via email?)</li>
-  <li>Privacy (not telling every login attempt to a big company)</li>
+  <li><mark>Easy</mark> to implement</li>
+  <li><mark>Trusted</mark> identification</li>
+  <li>Avoid dealing with how to <mark>secure passwords</mark></li>
+  <li><mark>No lock-in</mark> (identification via email?)</li>
+  <li><mark>Privacy</mark> (not telling every login attempt to a big company)</li>
 </ul>
 </div>
 </article>
@@ -106,9 +106,9 @@ blog post by François Marier</a></p>
 <div class="simplebox">
 <img src="access_denied.jpg" alt="Access Denied" class="slidepic">
 <ul>
-  <li>Local: Need to secure passwords</li>
   <li>Local: Sounds easy to implement, <mark>complications</mark> in details</li>
   <li>Local: Can always be trusted</li>
+  <li>Local: Need to secure passwords</li>
   <li>External: Potential for <mark>lock-in</mark></li>
   <li>External: Potential <mark>privacy issues</mark></li>
   <li>External: Implementation difficulty depends on API</li>
@@ -125,8 +125,8 @@ blog post by François Marier</a></p>
   <li><s>Mozilla Persona</s></li>
   <li><s>Firefox Accounts</s></li>
   <li>Facebook, Google, GitHub, ...</li>
-  <li>Other OAuth2 providers</li>
-  <li>OpenID Connect (OIDC) providers (based on OAuth2)</li>
+  <li>Other <mark>OAuth2</mark> providers</li>
+  <li><mark>OpenID Connect (OIDC)</mark> providers (based on OAuth2)</li>
   <li>Other/older providers/standards (OAuth1, ...)</li>
   <li>Intermediates, e.g. Auth0</li>
 </ul>
@@ -171,9 +171,9 @@ blog post by François Marier</a></p>
 <div class="simplebox">
 <img src="kairo_at_auth.png" alt="KaiRo.at Auth" class="slidepic">
 <ul>
-  <li>OAuth2 API (potential extension to OIDC later), using <a href="http://bshaffer.github.io/oauth2-server-php-docs/">oauth2-server-php</a></li>
-  <li>Password storage with password_hash (currently bcrypt) + nonce, auto-upgrade on login</li>
-  <li>Relatively easy to install on Linux with Apache + PHP5/PHP7 + MySQL (Other DBs should be easy to support)</li>
+  <li><mark>OAuth2 API</mark> (potential extension to OIDC later), using <a href="http://bshaffer.github.io/oauth2-server-php-docs/">oauth2-server-php</a></li>
+  <li>Password storage with <mark>password_hash</mark> (currently bcrypt) + nonce, auto-upgrade on login</li>
+  <li>Relatively easy to install on "<mark>LAMP</mark>" (Linux with Apache + MySQL + PHP5/PHP7)</li>
   <li><a href="http://www.doctrine-project.org/projects/dbal.html">Doctrine DBAL</a> for DB abstraction,
       <a href="https://github.com/KaiRo-at/php-utility-classes">php-utility-classes</a> for email and DOM document abstraction</li>
   <li>Skinnable to brand installation to fit operator</a>
@@ -187,11 +187,12 @@ blog post by François Marier</a></p>
 
 <div class="simplebox">
 <ul>
-  <li>Only Authorization Code flow supported right now, oauth2-server-php can do Client Credentials as well as OIDC, should not be too hard to add.</li>
-  <li>Tested with Apache and MySQL for now, other web and DB servers should be possible easily.</li>
-  <li>Rudimentary documentation exists in the main README.</li>
+  <li>Only <mark>Authorization Code</mark> flow supported right now, oauth2-server-php can do Client Credentials as well as OIDC, should not be too hard to add.</li>
+  <li>Tested with <mark>Apache and MySQL</mark> for now, other web and DB servers should be possible easily.</li>
+  <li>Rudimentary documentation exists in the main <mark>README</mark>.</li>
   <li>Languages supported are US English (default) and German, detected via Accept-Language sent by browser.</li>
   <li>Testing is done by running logins with KaiRo's websites (2 different client implementations).</li>
+  <li>Special Thanks to Christoph Zauner for doing a review that didn't find any actual security issues (but some minor comments).</li>
   <li><mark>Open Source at <a href="https://github.com/KaiRo-at/authserver">github.com/KaiRo-at/authserver</a></mark>, under MPL2 - <mark>released TODAY</mark>!</li>
 </ul>
 </div>
@@ -203,24 +204,23 @@ blog post by François Marier</a></p>
 <div class="simplebox">
 <img src="generic_auth.png" alt="KaiRo.at Auth" class="slidepic">
 <ul>
-  <li>Implementation of OIDC and perhaps Client Credentials flows.</li>
-  <li>Setting up a test suite and infrastructure.</li>
-  <li>Writing more complete documentation.</li>
-  <li>More languages?</li>
+  <li>Implementation of <mark>OIDC</mark> and perhaps Client Credentials flows.</li>
+  <li>Setting up a <mark>test</mark> suite and infrastructure.</li>
+  <li>Writing more complete <mark>documentation</mark>.</li>
+  <li>More UI languages?</li>
   <li>More installations?</li>
-  <li>Your ideas and pull requests!</li>
+  <li><mark>Your ideas and pull requests!</mark></li>
 </ul>
 </div>
 </article>
 
 <article id="end" title="The End">
 
-<div class="simplebox" style="position: relative;">
-<h1 class="cent" style="position: absolute; width: calc(100% - 2rem); z-index: 3; font-size: 2.5em;">Questions?</h1>
-<h2 class="cent" style="position: absolute; width: calc(100% - 2rem); top: 20rem; z-index: 3; font-size: 2em;"><a href="https://github.com/KaiRo-at/authserver">github.com/KaiRo-at/authserver</a></h2>
-<img src="access_enabled.jpg" class="sshot"
-     style="width: 100%; z-index: 1;"
-     alt="Access Enabled">
+<div class="simplebox endslidecontainer">
+<h1 class="cent endslidetext">Questions?</h1>
+<h2 class="cent endslidetext"><a href="https://github.com/KaiRo-at/authserver">github.com/KaiRo-at/authserver</a></h2>
+<h3 class="cent endslidetext">kairo@kairo.at,<br><a href="https://mozillians.org/en-US/u/KaiRo/">mozillians.org/u/KaiRo/</a></h3>
+<img src="access_enabled.jpg" class="sshot endslidepic" alt="Access Enabled">
 </div>
 </article>