)]}'
{"security-guide/section_case-studies-pki-and-certificate-management.xml":[{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"50e47fba385934d34a521a64d70d96fd2a77dfa4","unresolved":false,"context_lines":[{"line_number":11,"context_line":"      \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e"},{"line_number":12,"context_line":"      \u003cpara\u003eAfter looking through the secure communication controls of"},{"line_number":13,"context_line":"        both FedRAMP/FISMA and HIPAA, Alice decides to have all the"},{"line_number":14,"context_line":"        systems use TLS 1.1 or greater, with export ciphers and SSL"},{"line_number":15,"context_line":"        disabled. She registers the website through a certificate"},{"line_number":16,"context_line":"        signing company and validates her identity and workplace to get"},{"line_number":17,"context_line":"        a public certificate. This is then added to the web application"}],"source_content_type":"application/xml","patch_set":3,"id":"9af37de9_893a6dcc","line":14,"updated":"2015-05-10 14:38:41.000000000","message":"suggest also add RC4 ciphers here (Bar Mitzvah).","commit_id":"38beea5253e7759574a4ec5e7c58f360257b2e38"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"50e47fba385934d34a521a64d70d96fd2a77dfa4","unresolved":false,"context_lines":[{"line_number":18,"context_line":"        so that incoming clients will be able to use TLS. Internally,"},{"line_number":19,"context_line":"        she configures a PKI infrastructure to failover across"},{"line_number":20,"context_line":"        availability zones, and bundles the trust certificate into each"},{"line_number":21,"context_line":"        golden images certificate store so that new images will be able"},{"line_number":22,"context_line":"        to use the certificate upon creation. She also notes in the"},{"line_number":23,"context_line":"        golden image update policy that the certificate will need to be"},{"line_number":24,"context_line":"        rotated in the image and on running instances before the"}],"source_content_type":"application/xml","patch_set":3,"id":"9af37de9_a95bf12d","line":21,"updated":"2015-05-10 14:38:41.000000000","message":"change \"images\" to \"image\u0027s\"","commit_id":"38beea5253e7759574a4ec5e7c58f360257b2e38"}],"security-guide/section_case-studies-system-documentation.xml":[{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"50e47fba385934d34a521a64d70d96fd2a77dfa4","unresolved":false,"context_lines":[{"line_number":30,"context_line":"        hypervisor crossing Management, Guest, and Public domains. She"},{"line_number":31,"context_line":"        will then be able to dictate additional controls that ensure"},{"line_number":32,"context_line":"        and reinforce the trust level of each domain. For example, the"},{"line_number":33,"context_line":"        application will be exposed to the internet, and therefore data"},{"line_number":34,"context_line":"        coming through that will initially be untrusted before it is"},{"line_number":35,"context_line":"        moved through to the data domain and into the database.\u003c/para\u003e"},{"line_number":36,"context_line":"    \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9af37de9_494b655a","line":33,"updated":"2015-05-10 14:38:41.000000000","message":"change \"internet\" to \"Internet\" per doc convention","commit_id":"38beea5253e7759574a4ec5e7c58f360257b2e38"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1cb5b425456ea3183d5f330433884de60d1febfe","unresolved":false,"context_lines":[{"line_number":30,"context_line":"        hypervisor crossing Management, Guest, and Public domains. She"},{"line_number":31,"context_line":"        will then be able to dictate additional controls that ensure"},{"line_number":32,"context_line":"        and reinforce the trust level of each domain. For example, the"},{"line_number":33,"context_line":"        application will be exposed to the internet, and therefore data"},{"line_number":34,"context_line":"        coming through that will initially be untrusted before it is"},{"line_number":35,"context_line":"        moved through to the data domain and into the database.\u003c/para\u003e"},{"line_number":36,"context_line":"    \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"9a0c5dc1_a5b9b930","line":33,"updated":"2015-05-12 19:59:08.000000000","message":"See Brant\u0027s comment  on patch set 3: internet -\u003e Internet","commit_id":"d5339c2cab6e7070ddabf807540662447f9644c8"}],"security-guide/section_introduction-to-case-studies.xml":[{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"80f2cba5186de177eecda075c7a1921f45ba96e4","unresolved":false,"context_lines":[{"line_number":29,"context_line":"      leverage existing authentication/authorization infrastructure in"},{"line_number":30,"context_line":"      the form of Microsoft Active Directory, and an existing enterprise"},{"line_number":31,"context_line":"      SEIM deployment that she will then build new views and correlation"},{"line_number":32,"context_line":"      rules to better monitor the state of her cloud.\u003c/para\u003e"},{"line_number":33,"context_line":"  \u003c/section\u003e"},{"line_number":34,"context_line":"  \u003csection xml:id\u003d\"introduction-to-case-studies-case-study-bob-the-public-cloud-provider\"\u003e"},{"line_number":35,"context_line":"    \u003ctitle\u003eCase study: Bob, the public cloud provider\u003c/title\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"1aca2d91_46962440","line":32,"updated":"2015-05-08 19:05:15.000000000","message":"the last sentence reads a little odd to me. maybe the latter part needs something like \"...that she will then use to build new views...\"","commit_id":"3eae40bd791ccb31f8833ccd97976482a388ec44"}]}