usnistgov / SCAP

The repository will be used to track issues and post specifications related to the Security Automation Protocol (SCAP).
1 stars 0 forks source link

Update or remove ARF specification #11

Open dragosprisaca opened 3 weeks ago

vanderpol commented 3 weeks ago

From past NIST 3.0 working calls, it appears that ARF was going to remain in the SCAP specification? If it's not being used by anyone, and if it's removed from the spec it might lower the bar for SCAP adoption. If it should remain in the SCAP 3.0 specification, maybe this should be updated that SCAP tools MAY support creating ARF vs SHALL