HTTP REST API for TAXII 2.0

["Jordan, Bret" <bret.jordan@bluecoat.com>]

All,

Given the strawman MTI discussion for using HTTP, the slack channel over the past few weeks has had a very lively discussion about what it would look like if we implemented a RESTful API for TAXII 2.0 on top of HTTP.  As this discussion has started to come to a steady state, we feel that it is important to move it out of Slack and in to the formal email discussion space to see if it holds water and hopeful flesh out further ideas.  

If we were to use a RESTful API over HTTP for TAXII 2.0, this would not represent a radical change form TAXII 1.1, but rather, IMO, a natural evolution of the TAXII 1.1 services concept.  I also believe this will enable us to build a foundation from what future versions of TAXII, beyond 2.0, can iterate and add functionality. 

The current mock up on the HTTP REST API can be found here:

https://github.com/TAXIIProject/TAXII-Specifications/wiki/HTTP-REST-API-for-TAXII-2.0

  

NOTE: remember anyone that wants to join our Slack channel, please let us know, just be mindful that it can be very high volume.  

Thanks,

Bret

Bret Jordan CISSP

Director of Security Architecture and Standards | Office of the CTO

Blue Coat Systems

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." 

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail