Hi Nuno, As far as I understand it using a company web address does not necessarily mean the document is available over the Internet. It's just a way to provide uniqueness. We are also looking at providing a default name space at spdx.org but that would require use of a UID in case someone did not have domain name.
Jack -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Nuno Brito Sent: Thursday, April 03, 2014 8:18 AM To: Bill Schineller Cc: [email protected] Subject: Re: proposed language for referencing element in one SPDX document from another Hi Bill, The proposed approach is useful. I will try it out in practice. Just have one question in regards to: > When releasing an SPDX document for external consumption, its basename > must be unique within the namespace of the producing organization. > (e.g. http://acme.com/spdx/mypackage-1-2.spdx where the organization > will not publish another file with basename 'mypackage-1-2.spdx' ) I have cases where the document is included on the distribution package but where the owners are not willing to make it available to public (just privately to selected companies). Meaning, a network location isn't possible as namespace. I'm currently referring to other SPDX documents within the folder structure as solution. To keep the URI scheme possible and reference documents within the folders, would something like this be possible? file:///./spdx/mypackage-1-2.spdx Or perhaps I misunderstood the intention of namespaces. My thanks in advance. With kind regards, Nuno Brito --- email: [email protected] phone: +49 615 146 03187 _______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech _______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
