search

oasis-tcs / cti-taxii2

OASIS CTI TC: An official CTI TC repository for TAXII 2 work
https://github.com/oasis-tcs/cti-taxii2
Other
9 stars 4 forks source link

X-headers need clarity on where they can be used #53

Closed jordan2175 closed 6 years ago

jordan2175 commented 6 years ago

Jason opened a comment in section 3.2 of the 2.1 spec document that said the x-headers needed verbiage that states where they can be used and where they can no. He originally stated that they should be on the /collections// and /collections//objects/ endpoints. However, I think this was in error. I think it should read as follows:

This header SHOULD only be present on responses to the /collections//manifest/, /collections//objects/, and /collections//objects// endpoints. Behaviour of this header on any other endpoint, is not defined.

jordan2175 commented 6 years ago

We changed the text to be:

The X-TAXII-Date-Added-First header is an extension header. It indicates the date_added timestamp of the first object of the response.

The value of this header MUST be a timestamp. All HTTP 200 and 206 responses to the following endpoints MUST include the X-TAXII-Date-Added-First header: GET /collections//manifest/ GET /collections//objects/ GET /collections//objects// Behaviour of this header on any other endpoint, is not defined.