Hi Tom,I've never seen ISO documents free. However, in this case, it might be possible for me to point to a non-ISO repository for the spec, because the Linux Foundation keeps a copy.
Eliot On 12.09.22 13:56, tom petch wrote:
From: OPSAWG <[email protected]> on behalf of [email protected] <[email protected]> Sent: 07 September 2022 12:35 A different thought. Back in November 2021, Henk pointed out that the ISO document was freely available Which it is when using the URI he gave which has and extra letter 'E' in it. Using the URI in the I-D, I get told the document is available for a lot of Swiss francs. Tom Petch A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operations and Management Area Working Group WG of the IETF. Title : Discovering and Retrieving Software Transparency and Vulnerability Information Authors : Eliot Lear Scott Rose Filename : draft-ietf-opsawg-sbom-access-08.txt Pages : 21 Date : 2022-09-07 Abstract: To improve cybersecurity posture, automation is necessary to locate what software is running on a device, whether that software has known vulnerabilities, and what, if any recommendations suppliers may have. This memo specifies a model to provide access to this information. It may optionally be discovered through manufacturer usage descriptions. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsawg-sbom-access/ There is also an htmlized version available at: https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-sbom-access-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsawg-sbom-access-08 Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts _______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg _______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg
OpenPGP_0x87B66B46D9D27A33.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg
