Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify csaf.data.security.domain.ltd in Requirement 10: DNS path #831

Open
sonnyvanlingen opened this issue Nov 20, 2024 · 0 comments
Open
Assignees
Labels
csaf 2.1 csaf 2.1 work editorial mostly nits and consistency

Comments

@sonnyvanlingen
Copy link

Suggestion to improve the usability.

Section 7.1.10 Requirement 10: DNS path documents the following:

The DNS record csaf.data.security.domain.tld SHALL resolve as a web server which serves directly the provider-metadata.json according to requirement 7.

It is not clarified to the reader that domain.tld is simply a placeholder which has to be made specific to the issuing party's own organisation and context.

Options to resolve:

  1. Add a sentence clarifying the situation such as Replace 'domain.tld' with the appropriate domain specific to your organization of use case.

  2. Simply change domain.tld to example.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
csaf 2.1 csaf 2.1 work editorial mostly nits and consistency
Projects
None yet
Development

No branches or pull requests

2 participants