TXF optional tests

[Allan Thomson <athomson@lookingglasscyber.com>]

Rich/John/Greg – I wanted to share with you a recent undo change of something previously discussed with you all.

 

Remember we discussed making the authentication tests optional for the TXF persona to allow a TAXII feed to pass the test without requiring authentication support. After further discussion in a recent interop call it was felt that until the TAXII 2.0 spec is changed to make authentication optional that the interop spec should not allow any persona of a TAXII server to pass without verifying that it can support authentication defined as mandatory in the TAXII 2.0 spec.

 

Therefore I undid the change to the Part 2 interop spec to make the authentication tests mandatory again for TXF.

 

The SC agreed that if we are to change it then we need to change the TAXII spec first to make it optional and then we can update the interop document to allow optional tests.

 

So would you mind filing a TAXII comment on 2.1 draft version to make authentication optional? That way, we can then update a future version of interop to make it optional once the TAXII spec is changed.

 

Although I agree with the premise that certain products should not require authentication I feel that this is the right path to follow to make it optional in the specification first and then Interop testing can follow the spec.

 

Regards

 

Allan