FDC3 Firewalls

For one of our members, they would like to run apps from multiple different members. This can be problematic from a firewall perspective in a way that (say) Symphony bots is not.

Can we have a discussion about this in the Identity/Security workstream?

Sep 15 '23 14:09 robmoffat

Due to domain-based filtering? The actual issue you wish to discuss isn't that clear from this issue. From the description given I'd assume all that's needed is whitelisting of URLs for apps you wish to use. Presumably, the domains that need whitelisting can be extracted from app directory records.

If there are deeper issues, for example, due to a web application firewall that's interfering in some other way, then it would be helpful to have that described in the issue.

Sep 19 '23 07:09 kriswest

Hi, I was in a meeting and wanted to capture this. Yes, effectively the problem is domain-based filtering. The wider problem is bureaucracy surrounding domain based filtering rules.

Sep 19 '23 09:09 robmoffat

@robmoffat do you still want to discuss this? If so perhaps @Yannick-Malins can add it to an agenda

Apr 24 '24 10:04 kriswest

Closed due to lack of activity. Reopen if there is still a discussion to have here that is relevant to the FDC3 Standard (rather than just general IT policy)

Sep 20 '24 09:09 kriswest