Bret – the intention is ‘no’. Certification only applies to specific persona/version and therefore if you certify 2.0 based product then it does not then include all future versions of your product.
If we need to clarify that in the text then please suggest changes. I did review this text with respect to this and we can pick up more in the Interop calls.
regards
Allan
From:
Bret Jordan <>
Date: Tuesday, March 13, 2018 at 8:34 AM
To: Jason Keirstead <>
Cc: Allan Thomson <>, "" <>, Interoperability Subcommittee <>, "" <>
Subject: Re: [EXT] [cti-stix] Re: [cti-interoperability] Re: [cti-stix] STIX Preferred Documents For Review/Comments
I could not find text that talks about which versions of the specification you are claiming conformance to and which product version that maps to. So if a product does this for STIX 2.0 does that mean they get to keep using this mark even
with 2.5 is out?
Bret
Sent from my Commodore 64
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
On Mar 13, 2018, at 8:19 AM, Jason Keirstead <
> wrote:
I am trying to align this document with what is going to be listed on the OASIS website.
I presumed that what is going to be listed on the OASIS website would outline the personas tested against.
It seems strange to allow an Attestation so vague that it doesn't outline the personas you're attesting to...
Below is the only thing you actually say in the attestation..
--
Which of the CTI Interop Tests was applied to the product or service listed in this Attestation?
______ STIX/TAXIITM 2.0 Interoperability Test Document - Part 1
______ STIX/TAXIITM 2.0 Interoperability Test Document - Part 2
-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security
"Things may come to those who wait, but only the things left by those who hustle." - Unknown
From: Allan Thomson <
>
To: Jason Keirstead <
>
Cc: " " < >,
" " < >, "Interoperability Subcommittee" <
>
Date: 03/13/2018 09:58 AM
Subject: [cti-interoperability] Re: [cti-stix] STIX Preferred Documents For Review/Comments
Sent by: <
>
The instructions/terms of use documents refer to the test plan documents.
However, the intention is that these documents do not have to be revised for every change to the test documents and act more as a general framework for the overall program going forward.
Please consider that these are not replacements for our test documents but rather a framework around them.
Allan
From:
Jason Keirstead <
>
Date: Monday, March 12, 2018 at 8:16 PM
To: Allan Thomson <
>
Cc: " " < >, " " < >,
Interoperability Subcommittee <
>
Subject: Re: [cti-stix] STIX Preferred Documents For Review/Comments
Isn't the personas being tested missing?
Sent from IBM Verse
Allan Thomson --- [cti-stix] STIX Preferred Documents For Review/Comments ---
From:
"Allan Thomson" <
>
To:
,
Cc:
"Interoperability Subcommittee" <
>
Date:
Mon, Mar 12, 2018 8:16 PM
Subject:
[cti-stix] STIX Preferred Documents For Review/Comments
<mime-attachment.png>
All – I have posted 2 documents that have been drafted by OASIS legal team for
Instructions on STIX Preferred program
Terms of use on STIX Preferred program
Please review these documents and if you have any comments or concerns please submit them to the Interop sub-committee by 19 th March (1 week from today).
SUGGESTION: Have your legal or GC teams also review these documents if you plan to have your organization participate in STIX Preferred.
If you would prefer to raise your concerns in person please plan to attend the Interop sub-committee meetings on Weds 9am PST. Details are on Kavi.
We plan to do a ballot on formal TC approval of these documents but we wanted to solicit feedback/comments before we do that.
We expect the ballot to start sometime after 19 th March.
Allan
Document Name
:
STIX
Preferred Instructions Draft
<mime-attachment.png>
Description
STIX Preferred Instructions Draft
Download
Latest Revision
Public
Download Link
Document Name
:
STIX
Preferred Terms of Use Draft
Description
STIX Preferred Terms of Use Draft
Download
Latest Revision
Public
Download Link
