jordan2175
commented
6 years ago We talked about this on the working call on 2018-05-22. The consensus of that call was to hold off and do this at a later time, perhaps when we do channels, or perhaps in TAXII 2.2. It was also brought up by Jason that the current spec does not normatively state that session must be HTTP 1.1, however, all of the examples call that out and the interop documents require it. So we might need to add some language about HTTP 1.1.
There is no reason not to allow this in 2.1
We have implemented this in our server.