OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [cti] On current TAXII discussions


How then do you paginate STIX objects if not by objects?  You can not really do it by bytes.  Breaking JSON objects up by bytes is a disaster waiting to happen.


From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Alexandre Dulaunoy <Alexandre.Dulaunoy@circl.lu>
Sent: Monday, March 13, 2017 10:53:43 AM
To: cti@lists.oasis-open.org
Subject: Re: [cti] On current TAXII discussions
On 12/03/17 13:13, Joep Gommers wrote:

> Lastly, it’s worthwhile to point out that in the current spec we require TAXII servers/clients to understand STIX.
> STIX is non-trivial and manipulating it (considering its many features) in this way puts a disproportioned burden
> on TAXII servers and their implementation. Although less complicated for IOC-only data, that’s not what TAXII
> is all about. We would highly recommend making a much cleaner cut.

We (as MISP team) strongly support this point. TAXII specification should be clearly separated from the STIX parsing
and especially the pagination over object is overkill in the current proposed specification.

Alexandre Dulaunoy
CIRCL - Computer Incident Response Center Luxembourg
41, avenue de la gare L-1611 Luxembourg
info@circl.lu - www.circl.lu

To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]