On 15.12.2015 18:39:33, Jordan, Bret wrote: >
> Question: Which of the following statements do you prefer? Or do you
> prefer something all together different? > >
> Option 1: A compliant TAXII server MAY implement the message broker
> solution, the cyber information repository solution, or both. >
> Option 2: A compliant TAXII server MUST implement the message broker
> solution and the cyber information repository solution.
>
I would suggest a third option: "A compliant TAXII server MUST implement the message broker solution and SHOULD implement the cyber information repository solution."
--
Cheers, Trey
--
Trey Darley Senior Security Engineer 4DAA 0A88 34BC 27C9 FD2B A97E D3C6 5C74 0FB7 E430 Soltra
An FS-ISAC & DTCC Company www.soltra.com -- "In protocol design, perfection has been reached not when there is nothing left to add, but when there is nothing left to take away." --RFC 1925
Attachment:
signature.asc
Description: PGP signature
