cti-taxii — archive

Re: [cti-taxii] Proposal to relax language in section 3.4 version URL query parameter

From: John Wunder
To: [email protected]
Date: Tue, 03 Apr 2018 13:04:00 -0000

Do you ever imagine wanting to do queries like “versions between June 4 to June 16”? If so I would say don’t make this change, because once you add that additional capability (to provide a start/stop date for a range of versions) it would introduce two ways of doing things (“2018-06” vs. “2018-06-01” to “2018-06-30”). If on the other hand the common use case is “modified this day” or “modified this year” then the approach below makes sense. Along those lines, what’s the use case for this wildcarding? Like I get the functionality, “I want to see any versions from June” but when would a client system want to make that request? John From: <[email protected]> on behalf of "Bret Jordan (CS)" <[email protected]> Date: Monday, April 2, 2018 at 4:09 PM To: "[email protected]" <[email protected]> Subject: [cti-taxii] Proposal to relax language in section 3.4 version URL query parameter All, Right now in the URL Query Parameter section 3.4.1 ( https://docs.google.com/document/d/1EsiWY7TGqt9yH6QUXv4c-opXSr3wR0TDMt8Q0yJjpoo/edit# ) for specifying a version, we have the following text for calling out a specific value. <value> - requests a specific version of an object. For STIX objects, this requests objects whose modified time matches exactly the provided value. This value MUST follow the rules for timestamp as defined in [ STIX™ Version 2.0. Part 1: STIX Core Concepts ]. I propose that we change this text to be: <value> - requests a specific version of an object. For STIX objects, this requests objects whose modified time matches exactly the provided value. This value MUST follow the rules for timestamp as defined in [ STIX™ Version 2.0. Part 1: STIX Core Concepts ]. The reason for this change is to allow a client to ask for "?match[version]=2017-01" and get all of the STIX objects and their versions from January 2017 but not from December 2016 or earlier or from February 2017 or later. This is documented here: https://github.com/oasis-tcs/cti-taxii2/issues/61 Bret