OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti-stix message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Proposal - Simplify UUID Requirements/Language

Iâm repeating a proposal Iâve made twice before in hopes it will be considered and accepted/rejected solely on its merits.  We have not re-established voting rights, so I cannot make a motion.


However, I believe it is a simple solution to the STIX Identifier discourse and its adoption would allow us to move on to more complex issues.




  • Simplify the existing language in the 2.0 CSD
  • Remove the arbitrary UUIDv4 restriction.  


Type Name: identifier


An identifier universally and uniquely identifies a SDO, SRO, Bundle, or Marking Definition. Identifiers MUST follow the form object-type--UUID, where object-type is the exact value (all type names are lowercase strings, by definition) from the type property of the object being identified or referenced and where the UUID is an RFC 4122-compliant UUID. The UUID MUST be generated according to the algorithm(s) defined in RFC 4122, [RFC4122].


Please note the following assertions:


  • The only requirement for using UUIDs as part of STIX Identifiers is uniqueness.
  • Any RFC 4122 compliant ID form meets this requirement  (Including UUIDv1).
  • RFC 4122 addresses the requirements for how compliant UUIDs are generated.



Patrick Maroney

Merlin â Advisor to Kings


Email:  patrick.maroney@darklight.ai




This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail so our records can be corrected.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]