Re: Initial draft: Spec for OpenC2 over HTTPS

The OpenC2 over HTTPS implementation spec WD01 has been improved with:

1) replacement of command-id in the sample messages with use of the HTTP X-Correlation-ID header, and removal of the OpenC2 head from the sample messages

2) A new section 1.6 on Suitability, which is a combination of what I'd propose as boilerplate for all OpenC2 transfer specs and material that specifies where the HTTPS solution is suitable.

https://docs.google.com/document/d/1nL8Eafo0VPNhVDf4Pa4ESY9hyrE7KbvVJmmdNOqnc3M/edit#

Dave

David P. Lemire, CISSP
OpenC2 Technical Committee Executive Secretary
OpenC2 Implementation Considerations SC Co-chair
Contractor support to NSA
Email: dave.lemire@g2-inc.com
Office: 301-575-5190 / Mobile: 240-938-9350

On Fri, Jun 15, 2018 at 5:56 PM, Dave Lemire <dave.lemire@g2-inc.com> wrote:

IS-SC Members,

I've posted an initial draft of the OpenC2 over HTTPS specification on the Google drive. The file, oc2-over-https-v1.0-WD01-wip, can be found in the folder:

implementation > transport-solutions > https

The direct link to the document is https://docs.google.com/document/d/1nL8Eafo0VPNhVDf4Pa4ESY9hyrE7KbvVJmmdNOqnc3M/edit#

Commenting is enabled.

The document content is reasonably complete, but there are some minor formatting issues to address (e.g., proper heading styles). A markdown version has been exported to the Google drive; I'll get it posted to the GitHub repo created for this product early next week.

Dave

David P. Lemire, CISSP
OpenC2 Technical Committee Executive Secretary
OpenC2 Implementation Considerations SC Co-chair
Contractor support to NSA
Email: dave.lemire@g2-inc.com
Office: 301-575-5190 / Mobile: 240-938-9350

openc2-imple message