Re: [mile] Request for draft reviews - review of FC5070-bis

["Moriarty, Kathleen" <[e-mail]>]

Roman & Paul,

Can you help with these questions/comments as well?

Thank you,
Kathleen

From: Panos Kampanakis (pkampana) [mailto:[e-mail]]
Sent: Thursday, June 06, 2013 2:26 PM
To: Moriarty, Kathleen; [e-mail]; Stoecker, Paul
Subject: RE: Request for draft reviews - review of FC5070-bis


Hi Paul,

Good starting point. Some comments and nits below from my first pass.
There should be more when I review again.

I remember sometime in the past there was a discussion  about what is an incidents if that should be updated in the 5070. I see that in your draft an incident is used as it was in 5070. I was just wondering if we had reached a consensus on it.


I also didn't see "uid" and "set id" definitions in the draft.


I don't see the EMailDetails class described in the document.

Nits:

- Should "This document contains changes with respect to its predecessor
      RFC5070:" be bulleted?

- The list in "This class will contain indicators from

      the list below " is not exactly below. The same for "the

      following included indicators are ones commonly used ". And the same for me occurrences of "following" in this section

- I am not sure if we want to keep the "<!-- CHANGE:" comments in the draft

- there are some XML complexType like "SoftwareType" that are described as classes in the comments IODEF schema, but these are not classes.



I aqlso see that you will have usecases-examples in this doc, so mayne I will remove mine from the guidance document.


Rgs,
Panos



From: [e-mail]<mailto:[e-mail]> [mailto:[e-mail]] On Behalf Of Moriarty, Kathleen
Sent: Friday, May 17, 2013 2:13 PM
To: [e-mail]<mailto:[e-mail]>
Subject: [mile] Request for draft reviews

Greetings!

We have had a number of documents updated since the last meeting.  Thank you to all of the editors for making the requested changes!  The current list of drafts up for review (including those that will be a part of the WG after the charter update) include:

RFC5070-bis (IODEF Revision):
http://datatracker.ietf.org/doc/draft-ietf-mile-rfc5070-bis/

Draft on IODEF Guidance:
(input from experience, real use cases, and draft review will be helpful)
http://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/

Structured Cybersecurity Information draft (close to final):
http://datatracker.ietf.org/doc/draft-ietf-mile-sci/

IODEF Enumeration Reference Format:
http://datatracker.ietf.org/doc/draft-montville-mile-enum-reference-format/

Resource-Oriented Lightweight Indicator Exchange (ROLIE):
http://datatracker.ietf.org/doc/draft-field-mile-rolie/

Please take some time to review the drafts and provide feedback to the list.  It would be helpful if we can iterate on most of them prior to the next meeting.  A couple of the drafts are very close to being done.  The list of current drafts and published RFCs can be found at the following link:
http://datatracker.ietf.org/wg/mile/

We will follow up soon on the charter update as well.

Thank you all in advance!
Kathleen