[mile] some minor coorrections for RFC7970 and its schema

"Takeshi Takahashi" <takeshi_takahashi@nict.go.jp> Wed, 23 August 2017 06:30 UTC

Return-Path: <takeshi_takahashi@nict.go.jp>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81DE713233D for <mile@ietfa.amsl.com>; Tue, 22 Aug 2017 23:30:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.501
X-Spam-Level:
X-Spam-Status: No, score=-0.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lFBohrX6kOMX for <mile@ietfa.amsl.com>; Tue, 22 Aug 2017 23:30:22 -0700 (PDT)
Received: from ns2.nict.go.jp (ns2.nict.go.jp [IPv6:2001:df0:232:300::2]) by ietfa.amsl.com (Postfix) with ESMTP id 5EE2D132194 for <mile@ietf.org>; Tue, 22 Aug 2017 23:30:16 -0700 (PDT)
Received: from gw2.nict.go.jp (gw2.nict.go.jp [133.243.18.251]) by ns2.nict.go.jp with ESMTP id v7N6U5bP021042; Wed, 23 Aug 2017 15:30:05 +0900 (JST)
Received: from mail1.nict.go.jp (mail1.nict.go.jp [133.243.18.14]) by gw2.nict.go.jp with ESMTP id v7N6U5eY021036; Wed, 23 Aug 2017 15:30:05 +0900 (JST)
Received: from LAPTOP9DLCDU5S (unknown [133.243.29.140]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail1.nict.go.jp (NICT Mail Spool Server1) with ESMTPS id 0281ACDB9; Wed, 23 Aug 2017 15:30:05 +0900 (JST)
From: Takeshi Takahashi <takeshi_takahashi@nict.go.jp>
To: mile@ietf.org, rdd@cert.org
Date: Wed, 23 Aug 2017 15:31:04 +0900
Message-ID: <000a01d31bd9$659568a0$30c039e0$@nict.go.jp>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_000B_01D31C24.D57DACE0"
X-Mailer: Microsoft Outlook 16.0
Content-Language: ja
Thread-Index: AdMb2QBOKeh+Q59VQZ2DPeHrUaDuig==
X-Virus-Scanned: clamav-milter 0.98.7 at zenith2
X-Virus-Status: Clean
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/0LjINdt2pBoPFBQLb3sMjw6cMq0>
Subject: [mile] some minor coorrections for RFC7970 and its schema
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Aug 2017 06:30:26 -0000

Hello Roman and all,

Based on the discussion at the Prague meeting, let me propose the following
corrections for RFC7970 and its schema.

[Proposed changes to the IODEFv2 schema registered at the IANA website]
Change #1: unnecessary space in the schemaLocation of
xmldsig-core-schema.xsd was removed
Change #2: unnecessary space in the schemaLocation of iodef-enum-1.0.xsd was
removed
Change #3: unnecessary space in the schemaLocation of iodef-sci-1.0.xsd was
removed
Change #4 The minOccurs of the URL was defined in the ThreatActor class.
(Otherwise, the schema does not allow us to omit the URL element.)
Change #5 the "ext-value" was not supported by the above enum value.
Therefore, the bulkobservable-type-type was fixed to allow the value
"ext-value".

FYI: The attached file is the revised schema file.

[Proposed correction to the RFC7970]
The IODEFv2 schema is embedded in the RFC7970.
Therefore, the above correction needs to be reflected to the RFC7970 as
well.

In addition to that, in the example in Section 7.2, the current text has the
following line.
               <BulkObservable type="fqdn">
However, "fqdn" is not a qualified value. We may use "domain-name" or
"ext-value".

If the schema is going to be revised, we will work on the JSON schema based
on the revised one.

Take