TAXII SC Call 10/13 Notes

All,

Notes have been posted from yesterday’s call on the OASIS Wiki: https://wiki.oasis-open.org/cti/taxii/minutes/2015-10-13

Key items are:
There was a question whether HTTPS-only (vs. HTTP and HTTPS) is the right choice.
A question was raised whether HTTPS + HTTP Basic + JWT (JSON Web Token) could be accredited. There was an opinion on the call that it could, though this should be confirmed.
A question was raised about WebSockets vs. Long Polling for addressing the busy-wait pain point for TAXII 1.1 / 1.0.
There was a desire for clarity on the CTI Scenario, specifically which parts were in which scopes (e.g., TAXII, implementation, deployment, and process).
Since the TC is looking to begin spec work, there will be a call for editors.

In addition to the “month ahead” topics mentioned on the call, the above topics will be under discussion in the TAXII SC this month.

Thank you.
-Mark