Re: [cti-taxii] Use of well_known

["Jason Keirstead" <Jason.Keirstead@ca.ibm.com>]

- The RFC has been around for 6 years and there are only 25 registered entries. If the standard was successful, one should expect hundreds of entries by now. Interestingly, one of the use cases given in the RFC itself (robots.txt placement) still to this day does not even use it.

- Nearly the only use has been from other RFCs.. which points to no one outside the IETF community is bothering to register

Therefore myself... I see .well_known as a failed standard, and would rather avoid it.


-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com

Without data, all you are is just another person with an opinion - Unknown


"Bret Jordan (CS)" ---10/09/2016 07:14:06 PM---All, We previously had pretty good consensus around the entry point for the TAXII API being the foll

From: "Bret Jordan (CS)" <Bret_Jordan@symantec.com>
To: "cti-taxii@lists.oasis-open.org" <cti-taxii@lists.oasis-open.org>
Date: 10/09/2016 07:14 PM
Subject: [cti-taxii] Use of well_known
Sent by: <cti-taxii@lists.oasis-open.org>

---

All,

We previously had pretty good consensus around the entry point for the TAXII API being the following:

https://something.somewhere.com/taxii 

It has been suggested that we might look in to using the ".well_known" structure.  After doing some research it appears that in fact a very few number of sites do in fact use this, however, it appears that it is not widely used or adopted.

I am curious to know what everyone thinks?  Personally I am not a fan of using things like ".well_known" as it just adds an extra layer of abstraction and complication that I do not believe we need.  If you would like this in TAXII, please speak up and let us know why.  Otherwise we will pull the suggestion from the document.

Thanks
Bret