Re: [cti-taxii] TAXII Architecture

[Trey Darley <trey@soltra.com>]

On 15.12.2015 18:39:33, Jordan, Bret wrote:
> 
> Question: Which of the following statements do you prefer? Or do you
> prefer something all together different?
> 
> 
> Option 1: A compliant TAXII server MAY implement the message broker
> solution, the cyber information repository solution, or both.
> 
> Option 2: A compliant TAXII server MUST implement the message broker
> solution and the cyber information repository solution.
> 

I would suggest a third option:

"A compliant TAXII server MUST implement the message broker solution
and SHOULD implement the cyber information repository solution."

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"In protocol design, perfection has been reached not when there is
nothing left to add, but when there is nothing left to take away."
--RFC 1925

Attachment: signature.asc
Description: PGP signature