IETF Logo Mail Archive

Re: [sacm] IETF 95 Agenda on SWID world

Tony Rutkowski <tony@yaanatech.com> Thu, 07 April 2016 20:43 UTC

Return-Path: <tony@yaanatech.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1447E12D658 for <sacm@ietfa.amsl.com>; Thu, 7 Apr 2016 13:43:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l7HmickhpxtW for <sacm@ietfa.amsl.com>; Thu, 7 Apr 2016 13:43:28 -0700 (PDT)
Received: from sc9-admin2.yaanatech.net (63-128-177-42-static.dzbja.com [63.128.177.42]) by ietfa.amsl.com (Postfix) with ESMTP id 9C45D12D175 for <sacm@ietf.org>; Thu, 7 Apr 2016 13:43:27 -0700 (PDT)
Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by sc9-admin2.yaanatech.net (Postfix) with ESMTP id 97C5411D; Thu, 7 Apr 2016 20:43:27 +0000 (UTC)
Received: from [192.168.1.51] (pool-173-67-205-17.clppva.fios.verizon.net [173.67.205.17]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id A4FC458090; Thu, 7 Apr 2016 20:40:00 +0000 (UTC)
References: <04C2FAE9-476B-489F-81CB-48BCAAFA29D6@gmail.com> <SN2PR0601MB099226A18B2F660403AB4DC8A89A0@SN2PR0601MB0992.namprd06.prod.outlook.com> <E6535DCE-089D-4EEA-BA8F-AA1F1D5C42A5@gmail.com> <57064BF9.4060805@yaanatech.com> <BN1PR09MB0753A5F718438FBC43FC242D1900@BN1PR09MB075.namprd09.prod.outlook.com>
To: "Cheikes, Brant A." <bcheikes@mitre.org>, "sacm@ietf.org" <sacm@ietf.org>
From: Tony Rutkowski <tony@yaanatech.com>
Organization: Yaana Technologies
Message-ID: <5706C66E.5030707@yaanatech.com>
Date: Thu, 07 Apr 2016 16:43:26 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.1
MIME-Version: 1.0
In-Reply-To: <BN1PR09MB0753A5F718438FBC43FC242D1900@BN1PR09MB075.namprd09.prod.outlook.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/sacm/3G8uNAIPYGPLB14WgEVpIO9D4s0>
Subject: Re: [sacm] IETF 95 Agenda on SWID world
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: tony@yaanatech.com
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 20:43:30 -0000

Hi Brant,

That's OK.  It'll provide an opportunity for
some latter-day Marshall T. Rose to develop
a Simple SWID RFC!  Notwithstanding many
doing that already.  Ironically, OIDs plus
ORS is one of the more interesting neo-SWID
platforms being advanced.

The CVE reference is simply to provide a use
case for SWID CBOR in the context of exchanging
vulnerability information.  A simple Google search
provides several thousand examples of that nexus
being made, so it hardly the first time the use case
has been made.

--tony

On 2016-04-07 3:08 PM, Cheikes, Brant A. wrote:
> With that, I need to get back to reinventing decades-old work.
>
> /Brant
>
> P.S. The relevance of X.1520 (common vulnerabilities and exposures) to SWID CBOR needs to be clarified. -b

v2.23.0 | Report a Bug | By Email