OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [cti] CybOX Datatype Refactoring/Deprecation

On 24.02.2016 23:59:09, Foley, Alexander - GIS wrote:
> Again, if we want one and only one way to defang content, I can get
> along with that. I would prefer that we do not encourage or allow
> defanging. I just want everyone to be aware of the burden that comes
> with defanged content, especially when it allows for multiple
> methods of defanging.

I reckon this is as good a place as any in this impenetrable thread to
respond. o_O

I buy the arguments for pushing defanging/fanging onto the
implementers but as there clearly isn't consensus on that, let me pose
the question:

Can anyone point out a scenario where base64 encoding *would not work*
for defanging/fanging?

Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
"It is always possible to add another level of indirection." --RFC 1925

Attachment: signature.asc
Description: PGP signature

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]