bugtraq - FYI: CAIF Format Specification

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040222194150.GD6326@Login.CERT.Uni-Stuttgart.DE>
Date: Sun, 22 Feb 2004 20:41:50 +0100
From: Oliver Goebel <Goebel@...T.Uni-Stuttgart.DE>
To: bugtraq@...urityfocus.com
Subject: FYI: CAIF Format Specification

For Your Information:

a draft on the format specification of the Common Announcement
Interchange Format (CAIF) has been released. 

The project started in 2002 and produced a requirements document, which
was released in January 2003 (it is available from the CAIF homepage).
Based on the requirements document, its discussion, and incorporating
the additional experience gained in the meantime, this draft, specifying
the format of CAIF, has been written.

It is available at:

 http://cert.uni-stuttgart.de/projects/caif/draft-goebel-caif-format.txt

From the abstract:
The draft describes an XML-based format for security announcements.  It
defines a basic but comprehensive set of elements that is designed to
describe the main aspects of an issue related to security.  Besides
addressing more than one problem within a single document the format
allows to provide information for more than one target group of readers
as well as multi-lingual textual descriptions.  It can be used to
selectively produce different renderings of an announcement for the
intended target groups, addressing one, a sub-set, or all problems in
one or multiple languages.  The set of pre-defined elements can be
extended to reflect either temporary, exotic or new requirements on a
per-document basis.

The DTD is available as a single file at:

      http://cert.uni-stuttgart.de/projects/caif/caif.dtd

If you wish to be kept informed about new documents released, or updates
made to the existing ones, subscribe to the "caif-announce" mailing list:

    * caif-announce@...ts.CERT.Uni-Stuttgart.DE

      To subscribe, send email to:
      caif-announce-subscribe@...ts.CERT.Uni-Stuttgart.DE

Comments are very welcome on the caif-discuss-list. 

    * caif-discuss@...ts.CERT.Uni-Stuttgart.DE

      To subscribe, send email to:
      caif-discuss-subscribe@...ts.CERT.Uni-Stuttgart.DE

All documents are also available via the CAIF homepage at

      http://cert.uni-stuttgart.de/projects/caif/

Regards   
-- 
Oliver Goebel                        mailto:Goebel@...T.Uni-Stuttgart.DE
RUS-CERT Universitaet Stuttgart      Tel:+49 711 121-3678 / -3688 (fax)
Breitscheidstr. 2, 70174 Stuttgart   http://CERT.Uni-Stuttgart.DE/

Content of type "application/pgp-signature" skipped