Feature list and doc deep links

[oberstet]

I have assembled a list of CB features (still not complete, but more complete than anything we have right now). Can we integrate that into the docs? At a central, easily found location. With each feature a deep link into the respective doc location for that feature and/or at exmples in crossbarexamples (though the latter would ideally be only linked on the deep linked doc page - if there is one).

• Transport Encryption
  • TLS v1.2+ (not mentioned)
  • High-security TLS ciphers by default (RSA ECDHE AES GCM) (ciphers mentioned, but little reason given)
  • HTTP to HTTPS redirection - but should be linked to from http://crossbar.io/docs/Secure-WebSocket-and-HTTPS/
  • HSTS - option mentioned in Web Transport and Services, but should be linked from a more general "Making things secure" page
  • A+ Rating on SSL Labs
  • Perfect Forward Privacy - mentioned in http://crossbar.io/docs/Secure-WebSocket-and-HTTPS/
• End-to-End Encryption
  • WAMP Cryptobox
  • Curve 25519 based
  • High grade implementation (NaCl)
• Authentication
  • Multiple authentication modules
    • HTTP Cookie authentication
    • TLS Client Certificate Authentication
    • WAMP Challenge-Response Authentication
    • WAMP Cryptosign (Cruve 25519 based) Authentication
    • WAMP Ticket (OTP) Authentication
  • Static authentication credentials from node configuration
  • Dynamic authentication credentials from custom user procedure
• Authorization
  • Flexible authorization scheme (session, uri, action => allow, cache, disclose)
  • Static authorization pattern-based rules from node configuration
  • Dynamic authorization from custom user procedure
  • Role-based access control
  • Fine-grained permissions
• Supported Protocols
  • WAMP
  • HTTP/Web (Resource Trees)
  • HTTP/REST Bridge
  • MQTT Bridge
• Listening Transports
  • TCP listening transport
  • Unix domain socket listening transport
• WAMP Message Channels
  • WebSocket message channel
  • RawSocket message channel
  • HTTP/Long-poll message channel
• WAMP Serializations - documented in http://crossbar.io/docs/WebSocket-Options/, but not made explicit
  • Transparent payload serialization conversion
  • JSON serializer (with base64-binary auto-conversion)
  • MessagePack serializer
  • UBJSON serializer
  • CBOR serializer
• Universale Transports - docs missing
  • Run all transports on 1 Listening Port
  • Protocol switching on first byte
  • WAMP, REST, Web, MQTT all on 1 Port
  • Allows to use 1 server certificate for TLS
• [HTTP/REST Bridge]()
  • Call WAMP procedures via HTTP/REST requests
  • Receive WAMP calls on HTTP/REST endpoints
  • Publish WAMP events via HTTP/REST requests
  • Receive WAMP events on HTTP/REST endpoints
  • Web Hooks support for 3rd party service integration
• MQTT - minimal content, all below missing
  • MQTT v3.1 over any listening transport
  • Shared MQTT on Universal transports
  • Prefix and Wildcard Patterns mapped to WAMP
  • Last Will / Testament Messages
  • Retained Messages
  • QoS 1 Publishing
  • Fully integrated with authentication schemes
  • Publish WAMP events from MQTT
  • Publish MQTT events from WAMP
  • Subscribe to WAMP events from MQTT
  • Subscribe to MQTT events from WAMP
  • Three modes of payload mapping: Passthrough, MQTT-native, WAMP-native

[meejah]

As for the deep-links I see that the "TOC" (http://crossbar.io/docs/Table-of-Contents/) is now completely-exploded which is great!

It would probably also be good to make at least the "authentication" stuff linked "sideways" from other places, as that seems to be one of the "hard" ones for people to find.