1. 5/8/2006apatwa/SecureRSS 1 Secure RSS CS526 Class Project Ankur Patwa

2. 5/8/2006apatwa/SecureRSS 2 Project Goal Selective subscription User authentication Secure data transfer Scenarios: Faculty & Students Categories of clients Memos acc. to organizational hierarchy

3. 5/8/2006apatwa/SecureRSS 3 RSS Real Simple Syndication – dialect of XML Protocol for publish –> (syndicate ->) subscribe information sharing. (more of a broadcast – tune-in) Evolution: scriptingNews, 0.91,scriptingNews 2.0b1, 0.92, MetaWeblog API, 0.94, 1.0., 2.0, frozen at 2.0.1,….anticipate 2.0.2 & 2.0.3 for cleanup purposes. Atom – standardized feeds (RSS2.0 +) Usage – news & events, bookmarks & links, calendar, search results, mailing lists, podcasting Great to attract users

4. 5/8/2006apatwa/SecureRSS 4 RSS Channel attributes: Required (3): title, link, description Optional (15): language, copyright, managingEditor, webMaster, pubDate, lastBuildDate, category, generator, cloud, ttl, image, rating, textInput, skipHours, skipDays Item attributes: title, link description(optional)

5. 5/8/2006apatwa/SecureRSS 5 Publish operation Form HTML-1,2,3 group-1 group- 2 group-3

6. 5/8/2006apatwa/SecureRSS 6 Subscribe and Access Add user: Add user to ldap (if not present) Generate client certificate Email certificate Access Provide certificate Get user group and show corresponding channel

7. 5/8/2006apatwa/SecureRSS 7 Implementation for the “secure” part mod_auth_ldap (certificates) Directory level access in config files Script contact ldap server (login) Connect Bind query

8. 5/8/2006apatwa/SecureRSS 8 Limitations Not scalable to large # of groups xor group membership Modification in user groups leads to change in config files and directory structure. A management module required to manage what is published, for whom it is published & where it is published. Browser compatibility (oops)

9. 5/8/2006apatwa/SecureRSS 9 References RSS specs at Harvard Wiki RSS Entry Quickie at xml.com Secure Web access using client certificates – Dr. Chow mod_auth_ldap for Apache2 Secure Web site access with Perl