Ok, I think the LF reference is better anyway, since it points to a more recent version of spec.  So if it's all the same, I would just assume leave things as is.

Eliot

On 14.09.22 12:17, tom petch wrote:
From: OPSAWG <[email protected]> on behalf of Henk Birkholz 
<[email protected]>
Sent: 13 September 2022 12:18

Hi Eliot,

I think Tom was referring to this link:

https://standards.iso.org/ittf/PubliclyAvailableStandards/c081870_ISO_IEC_5962_2021(E).zip
Please excuse my perpetual latency.

<tp>

Yes, spot on.  I would be inclined to see that as the better reference but 
leave that to you.

And please accept my apology for being unable to cut and paste an e-mail URL 
into an e-mail; I used to be able to but advances in webmail or in browsers or 
in the datatracker or ... lost me that ability three years ago and I have yet 
to get it back, hence my reference to Henk and November 2021 hoping that that 
would be enough clues for others to find what I was referring to.

Tom Petch

Viele Grüße,

Henk

On 13.09.22 12:26, Eliot Lear wrote:
The only change from this version is the pointer to a free version of
the SPDX specification.  With this, I believe all issues have been
addressed.

Eliot

On 13.09.22 12:24, [email protected] wrote:
A New Internet-Draft is available from the on-line Internet-Drafts
directories.
This draft is a work item of the Operations and Management Area
Working Group WG of the IETF.

          Title           : Discovering and Retrieving Software
Transparency and Vulnerability Information
          Authors         : Eliot Lear
                            Scott Rose
    Filename        : draft-ietf-opsawg-sbom-access-09.txt
    Pages           : 21
    Date            : 2022-09-13

Abstract:
     To improve cybersecurity posture, automation is necessary to locate
     what software is running on a device, whether that software has known
     vulnerabilities, and what, if any recommendations suppliers may have.
     This memo specifies a model to provide access to this information.
     It may optionally be discovered through manufacturer usage
     descriptions.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsawg-sbom-access/

There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-sbom-access-09

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-opsawg-sbom-access-09


Internet-Drafts are also available by rsync at
rsync.ietf.org::internet-drafts


_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg

_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg
_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg

Attachment: OpenPGP_0x87B66B46D9D27A33.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg

Reply via email to