[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti] Status of CTI OASIS Open Repositories
A repo in OASIS does not increase trust. In fact, long term, most of the people that will use STIX and TAXII will never join OASIS. As Rich S has said and I agree, OASIS CTI membership is about building the standards not the tools and libraries.
Also keep in mind that if the repo is owned by OASIS and you start a project and then 12 months later deprecate it and rewrite it (a common think in open source) with all new functionality you can not delete that old repo that you
do not want people to use. It has to stay around forever, even if it contains code that is wrong.
In regards to getting things signed, even if you went through the 3-5 month process to get the paper work signed to join OASIS does not mean it will be easier to get the CLA signed. You will still have that 3-5 month process working
with your OGC.
Sent from my Commodore 64 PGP
Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]