RFC 9393
Concise Software Identification Tags, June 2023
- File formats:
- Also available: XML file for editing
- Status:
- PROPOSED STANDARD
- Authors:
- H. Birkholz
J. Fitzgerald-McKay
C. Schmidt
D. Waltermire - Stream:
- IETF
- Source:
- sacm (sec)
Cite this RFC: TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC9393
Discuss this RFC: Send questions or comments to the mailing list sacm@ietf.org
Other actions: Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 9393
Abstract
ISO/IEC 19770-2:2015 Software Identification (SWID) tags provide an extensible XML-based structure to identify and describe individual software components, patches, and installation bundles. SWID tag representations can be too large for devices with network and storage constraints. This document defines a concise representation of SWID tags: Concise SWID (CoSWID) tags. CoSWID supports a set of semantics and features that are similar to those for SWID tags, as well as new semantics that allow CoSWIDs to describe additional types of information, all in a more memory-efficient format.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.