TAXII SC Call 10/13 Notes

["Davidson II, Mark S" <mdavidson@mitre.org>]

All,

 

Notes have been posted from yesterday’s call on the OASIS Wiki: https://wiki.oasis-open.org/cti/taxii/minutes/2015-10-13

 

Key items are:

• There was a question whether HTTPS-only (vs. HTTP and HTTPS) is the right choice.
• A question was raised whether HTTPS + HTTP Basic + JWT (JSON Web Token) could be accredited. There was an opinion on the call that it could, though this should be confirmed.
• A question was raised about WebSockets vs. Long Polling for addressing the busy-wait pain point for TAXII 1.1 / 1.0.
• There was a desire for clarity on the CTI Scenario, specifically which parts were in which scopes (e.g., TAXII, implementation, deployment, and process).
• Since the TC is looking to begin spec work, there will be a call for editors.

 

In addition to the “month ahead” topics mentioned on the call, the above topics will be under discussion in the TAXII SC this month.

 

Thank you.

-Mark