On 29.10.2015 20:49:30, Jordan, Bret wrote:
> I could see the ID in URL format being just an entry points in to a
> RESTful API location on a TAXII server. So if a TAXII server has two
> core concepts (elements of the RESTful API):
>
> 1) Channel Communications
> 2) Data Storage / Query
>
> Then it is possible that IDs could easily fall in to the Data
> Storage / Query portion of the TAXII 2.0 RESTful API. If it is
> decided that something like this is desirable, then we can take up
> the task in the TAXII SC on what the URLs / REST entry points need
> to look like.
>
I like this approach on several levels but it does rely on the
implementer to ensure the immutability of the object referenced by the
URL, doesn't it?
--
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"For all resources, whatever it is, you need more." --RFC 1925
