[media-types] Notice for a potential media type registration: application/taxii+json

Robin Cover <robin@oasis-open.org> Tue, 24 April 2018 00:26 UTC

Return-Path: <robin.cover@oasis-open.org>
X-Original-To: media-types@ietfa.amsl.com
Delivered-To: media-types@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id C8B7E12DB6F for <media-types@ietfa.amsl.com>; Mon, 23 Apr 2018 17:26:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oasis-open-org.20150623.gappssmtp.com
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id okbY_twj56dy for <media-types@ietfa.amsl.com>; Mon, 23 Apr 2018 17:26:40 -0700 (PDT)
Received: from mail-ot0-x235.google.com (mail-ot0-x235.google.com [IPv6:2607:f8b0:4003:c0f::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FB0B12DA6B for <media-types@ietf.org>; Mon, 23 Apr 2018 17:26:40 -0700 (PDT)
Received: by mail-ot0-x235.google.com with SMTP id m22-v6so19306195otf.8 for <media-types@ietf.org>; Mon, 23 Apr 2018 17:26:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oasis-open-org.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=BUIWNTWBQ3lI8W2fZi1+DR9OjNmXABzkp5kfiSicx8Q=; b=fczZdM/XtSkBMBFlJwUL9Zp7Do/Fp4xXyIlYmjUb9PavosNbuW9swcUDOzF4a9egj5 GtdUJ2eH1cYJvXDTtgmHrnCyMgBcMTSa5uIXDrQUNWeRCKpYPeRJUdyaskGWFXEbQkrp kPIRkWJ6BZMi28RqPIJDTnB8KiPwIhY+jKvkA6oxSnHK2J2X/lRl4V2I0FTByc3T98O1 iUjZ9MbXsFkhktkhqlkcQjp5zo3iA5X0kROLmV/9XgcG2URJrwU5HYO1OVLfmd3sMPcF 511caMuOS9L5QOfg90MChEQeVvShqo35B2ratuTT3GRaxHtPG8vXby1+d3ZHMnFidQGH Bubw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=BUIWNTWBQ3lI8W2fZi1+DR9OjNmXABzkp5kfiSicx8Q=; b=jRQJAhL5FgPEIkrLl7NrZeZGTN7HQVA3yJ6l2on7IfzkqNGFJoVlx7RvFW7wQyeSTu RzV2XkWBdUlgbQpIAeQVn0ModfPV3kj1obh9Rtlg/wHds92VKfWKX1iE+M38/iQ/s9wp S43Cq88wDQ4mD26ewDaSCSvZyQ4DObW8RkjcwL/+bw/8PE0r748IuuXMkYSAt6sMNirj ovIsOW1qG7P5UJfMn3mWJv7ODiZ62pYgYkWHQxz5qpSXC7Cd8DMZ/AOjyRmljqnkwUoq DL4lJGnh4qT9za9zi3thZcxbUBmtCl8tM8DM84gT3FQrjbm5kOhHsYZdHdg6W0ZcfKKM KFpg==
X-Gm-Message-State: ALQs6tCVySpsnnaMHccQg3maAylpQ/TNqJOvstgn2T7k54+x5jI0yILi TY7CqYXOgoaM9lKQ1kxuzkPzRc0iSVJK7fDl577SbJCtQxA=
X-Google-Smtp-Source: AIpwx4/am3ao5a+uA7EiDaXJiJ0pO9u3b83M911894Tba8kcmM9EdDiiv1B48aIz7g4gKhrXcvULYrfLkp95Gis7c+c=
X-Received: by 2002:a9d:230b:: with SMTP id j11-v6mr13194468otb.234.1524529599606; Mon, 23 Apr 2018 17:26:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a9d:1343:0:0:0:0:0 with HTTP; Mon, 23 Apr 2018 17:26:39 -0700 (PDT)
From: Robin Cover <robin@oasis-open.org>
Date: Mon, 23 Apr 2018 19:26:39 -0500
Message-ID: <CADPQ6gjnw2+5fTGN7HcSm2qoApf5Z5bAQaK8LSrNpbTJAoGw7Q@mail.gmail.com>
To: IANA Media Types Discussion List <media-types@ietf.org>
Cc: Robin Cover <robin@oasis-open.org>, Robin Cover <robincover@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/media-types/lN7iDAihnT9eK01wALUsgnOgE50>
Subject: [media-types] Notice for a potential media type registration: application/taxii+json
X-BeenThere: media-types@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." <media-types.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/media-types>, <mailto:media-types-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/media-types/>
List-Post: <mailto:media-types@ietf.org>
List-Help: <mailto:media-types-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/media-types>, <mailto:media-types-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Apr 2018 00:26:44 -0000

[Notice #1 of 2]

Members of an OASIS Technical Committee wish to register two media types
associated with the STIX and TAXII specifications.  This email message
to the IANA mailing list provides the notice for the first of these two
identifiers, for potential media type registration in the standards tree.

I am the designated administrative contact for OASIS where IANA
registration requests are concerned, so following the Preliminary
Community Review period, I will formally submit the registration
requests to IANA.  For these two candidate registrations, the technical
lead is Bret Jordan (bret_jordan@symantec.com).  He has provided the
technical content and is tasked by the OASIS CTI TC to provide feedback
or discussion on this list, if the need arises.

- Robin Cover
OASIS Director of Information Services

IETF RFC6838 Section 5.6. Registration Template

Type name: application

Subtype name: taxii+json

Required parameters: None

Optional parameters: version.  This parameter is used to designate
the specification version of TAXII that is being used  during HTTP
content negotiation. Example: "application/taxii+json; version=2.1"

Encoding considerations: binary. Encoding considerations are
identical to those specified for the "application/json" media
type. See [RFC8259].

Security considerations: Security considerations relating to the
generation and consumption of TAXII messages are similar to
application/json and are discussed in Section 12 of [RFC8259].

Interoperability considerations: The TAXII specification
specifies the format of conforming messages and the interpretation
thereof.  In addition, the OASIS Cyber Threat Intelligence (CTI)
Technical Committee has defined interoperability tests to ensure
conforming products and solutions can exchange TAXII documents.

Published specification: TAXII Version 2.0
OASIS Committee Specification 01
Cited in the "OASIS Standards" document:
https://www.oasis-open.org/standards#oasiscommiteespecs, from

Applications that use this media type: TAXII is an application
layer protocol for the communication of cyber threat information
including STIX in a simple and scalable manner.

Fragment identifier considerations: None

Additional information:

 Deprecated alias names for this type: None
 Magic number(s): In general, the same as for application/json
 File extension(s): None
 Macintosh File Type Code(s):  In general, the same as for
   application/json [RFC8259].
 Object Identifier(s): None

Person & email address to contact for further information:
Robin Cover (robin@oasis-open.org)

Intended usage: COMMON

Restrictions on usage: None

Author: OASIS Cyber Threat Intelligence (CTI) Technical Committee
URI reference: http://www.oasis-open.org/committees/cti/

Change controller: OASIS

Provisional registration?: No

Other information:

1) the "Published specification:" cited above was approved as
Version 2.0 but is now under active revision

2) the revised TAXII specification Version 2.1 will contain the
complete text of the (finalized) IANA Media Type Registration in
an Appendix; in Version 2.0 the media type identifier was drafted
(incorrectly) as a candidate for the vendor tree

3) the technical content in the Version 2.1 revision for
TAXII does not materially change anything vis-a-vis TAXII
Version 2.0 as respects serialization, transport, or
client-server interactions that depend upon media type and
content negotiation

4) TC technical lead for this Preliminary Community Review Notice:
Bret Jordan (bret_jordan@symantec.com)

Robin Cover
OASIS, Director of Information Services
Email: robin@oasis-open.org
Staff bio: http://www.oasis-open.org/people/staff/robin-cover