OASIS Open Mailing List Archives  ·  All Lists  ·  cti-taxii  ·  2018-05

cti-taxii — archive

[Date Prev]  |  [Thread Prev]  |  [Thread Next]  |  [Date Next]   —  [Date Index]  |  [Thread Index]  |  [Month Index]  |  [List Home]

Re: [cti-taxii] Authentication in TAXII


Provided comments on the github issue. Allan Thomson CTO ( +1-408-331-6646) LookingGlass Cyber Solutions From: <[email protected]> on behalf of Bret Jordan <[email protected]> Date: Monday, May 7, 2018 at 12:44 PM To: "[email protected]" <[email protected]> Subject: [cti-taxii] Authentication in TAXII All, There has been some discussion in Slack and on Github about relaxing the requirement for TAXII Servers to support Basic Authentication. https://github.com/oasis-tcs/cti-taxii2/issues/58 What do people think of this? If we decide to do this, we may need to look at adding some sort of optional property to the discovery resource, the API-Root resource, or some place else to let the client know what kind of authentication is supported.  What I would like to avoid is requiring the owner of a TAXII client from having to pick up the phone and calling the owner of the TAXII server to figure out what kind of authentication they use. Bret

[Date Prev]  |  [Thread Prev]  |  [Thread Next]  |  [Date Next]   —  [Date Index]  |  [Thread Index]  |  [Month Index]  |  [List Home]