You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Split Getting Started out of Overview and promote it on the landing page
Move the "Where To Start" and "Modular Components" sections from
overview.md into a new getting-started.md, linked from the hero and
nav/sidebar (matching the directtrust-tools.github.io pattern). Also
move the BareMetal Assembly Project sidebar entry to the top, and
clean up copy (typos, grammar, wording) in Overview and Getting
Started.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TJcNswabKU3zekw6g5ccjF
If you want to stand up an instance of the reference implementation right away, the fastest path is the [BareMetal Assembly Project](/docs/direct-project-stock/) for the Java platform. It bundles the reference implementation's components into a ready-to-deploy stack, so you don't need to build or wire the pieces together yourself.
8
+
9
+
To build all components, including the BareMetal assembly, from source instead of using a prebuilt package, follow the instructions [here](https://github.com/DirectProjectJavaRI/direct-ri-build).
10
+
11
+
## Understanding the Modular Components
12
+
13
+
If you'd rather understand how the reference implementation's components fit together before diving in, start with the module list below. The reference implementation follows a modular design for easy reuse and extensibility, with components available in both .Net and Java.
Copy file name to clipboardExpand all lines: docs/overview.md
+5-25Lines changed: 5 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,32 +4,12 @@ title: Overview
4
4
5
5
# Overview
6
6
7
-
The reference implementation is an open source and pre-assembled implementation of the Direct specifications. An implementation exists in both the .Net and Java languages and can be downloaded freely from a handful of websites. A subproject of Direct, called Bare Metal, contains a set of instructions on procuring the reference implementation and standing up a reference HISP from scratch using only the reference implementation assemblies.
7
+
The reference implementation is an open source, pre-assembled implementation of the Direct specifications, available in both .Net and Java. A subproject called BareMetal provides everything needed to procure the reference implementation and stand up a HISP from scratch using only the reference implementation's assemblies.
8
8
9
-
The reference implementation is a fully working model with all sorts of bells and whistles, but it's just a model. If you've ever delved into the world of embedded hardware or robotics, the starting point is usually a reference board. The board is a cookie cutter model with several modules, inputs, outputs, and maybe an operating system or programmable circuits. However, the reference board is not intended to be the final design that ultimately goes into your finished solution. It is tweaked and extended with custom modules, or some modules may be removed. The end product is a customized board that meets the specific needs of your solution.
9
+
The reference implementation is a fully working model, but it's still just a model. Think of it like a reference board in embedded hardware or robotics: a cookie-cutter design with a standard set of modules, inputs, and outputs. It isn't meant to be the final product — it's tweaked, extended with custom modules, or trimmed down until it becomes a customized board that fits your solution.
10
10
11
-
The same is true for Direct. The reference implementation comes with a standard deployment model and software components such as the security and trust agent, the messaging gateway, a certificate store and a simple web or commandline tool for configuration. However, the model does notmeet the requirements of an industry-class production system, such as high availability, failover, scalability and disaster recovery. The only edge protocol supported is XD and POP/SMTP, and although this may work well for email clients, innovative edge clients and workflows may need other protocols such as REST, SOAP, and custom authentication and authorization modules.
11
+
The same is true for Direct. The reference implementation ships with a standard deployment model and a set of software components — the security and trust agent, the messaging gateway, a certificate store, and a simple web or command-line configuration tool. It does not, however, meet the requirements of an industry-class production system: high availability, failover, scalability, and disaster recovery. It also supports only the XDR and POP/SMTP edge protocols; other edge clients and workflows may need additional protocols such as REST or SOAP, along with custom authentication and authorization modules.
12
12
13
-
Finally, the reference implementation does not meet the policy requirements emerging from the various governance agencies. For example, the private certificate store in the reference implementation does not meet auditing requirements for access to private keys. Another example, the auditing subsystem does not write audit events to a storage mechanism with proper access controls. The reference implementation is stubbed to meet these requirements and supports plugging in custom instances of reference implementation interfaces and/or modules. For a HISP to become fully compliant with industry best practices, certificate policies and required operational procedures, investment in infrastructure and some software development is necessary.
13
+
Nor does the reference implementation meet the policy requirements set by various governance agencies. For example, its private certificate store doesn't meet auditing requirements for access to private keys, and its audit subsystem doesn't write events to a storage mechanism with proper access controls. These areas are intentionally stubbed out so you can plug in custom implementations of the reference interfaces and modules to meet them. Becoming a fully compliant HISP — meeting industry best practices, certificate policies, and required operational procedures — takes additional investment in infrastructure and software development.
14
14
15
-
## Where To Start
16
-
17
-
If you want to jump right in with both feet and stand up an instance of the reference implementation, the obvious choice is to go to the BareMetal installation page for the Java platform.
18
-
19
-
If you want to understand the details of the reference implementation componenst and they how fit together, refer to the list of modules in the section below.
20
-
21
-
If you would like build all components including the BareMetal assembly from source code vs using a prebuilt BareMetal assembly, use the instuctions [here](https://github.com/DirectProjectJavaRI/direct-ri-build)
22
-
23
-
## Modular Components
24
-
25
-
The reference implementation adopts a modular design for easy asset reuse and extensibility. Components are available in both .Net and Java.
0 commit comments