Re: [cti-stix] STIX 2.1 discussion

["Jason Keirstead" <Jason.Keirstead@ca.ibm.com>]

Alexandre - that is great news, thanks for the clarification.

-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com

Without data, all you are is just another person with an opinion - Unknown


Alexandre Dulaunoy ---09/02/2016 12:21:41 PM---On 30/08/16 13:30, Jason Keirstead wrote: > The license for MISP is AGPL, that is going to put it ou

From: Alexandre Dulaunoy <Alexandre.Dulaunoy@circl.lu>
To: cti-stix@lists.oasis-open.org
Date: 09/02/2016 12:21 PM
Subject: Re: [cti-stix] STIX 2.1 discussion
Sent by: <cti-stix@lists.oasis-open.org>

---

On 30/08/16 13:30, Jason Keirstead wrote:
> The license for MISP is AGPL, that is going to put it out of bounds.

Only the MISP software is AGPL.

The taxonomies are clearly separated from the MISP software to cover such case
and not under the AGPL terms but CC0.

> To use these taxonomies as-is, we would have to seek out all of the
> contributors and re-issue the works under a different license to comply
> with OASIS IPR (and to allow them to be useable by other non-GPL products).

Nope.

The default license for MISP taxonomies is CCO (public domain)[1] except if
one of the author of the taxonomy decided to license it under a different
one. For my understanding, public domain is compatible with the OASIS IPR.

I hope this clarifies.

Cheers.

[1] https://creativecommons.org/publicdomain/zero/1.0/


-- 
Alexandre Dulaunoy
CIRCL - Computer Incident Response Center Luxembourg
41, avenue de la gare L-1611 Luxembourg
info@circl.lu - www.circl.lu

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that 
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php