Concise Software Identification Tags
RFC 9393, “Concise Software Identification Tags”, is a Proposed Standard document published in June 2023 by H. Birkholz, J. Fitzgerald-McKay, C. Schmidt, D. Waltermire. The canonical text is published by the RFC Editor.
Abstract
ISO/IEC 19770-2:2015 Software Identification (SWID) tags provide an extensible XML-based structure to identify and describe individual software components, patches, and installation bundles. SWID tag representations can be too large for devices with network and storage constraints. This document defines a concise representation of SWID tags: Concise SWID (CoSWID) tags. CoSWID supports a set of semantics and features that are similar to those for SWID tags, as well as new semantics that allow CoSWIDs to describe additional types of information, all in a more memory-efficient format.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9393 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9392 Sending RTP Control Protocol Feedback for Congestion Control in Interactive Multimedia Conferences
- RFC 9394 IMAP PARTIAL Extension for Paged SEARCH and FETCH
- RFC 9391 Static Context Header Compression over Narrowband Internet of Things
- RFC 9395 Deprecation of the Internet Key Exchange Version 1 Protocol and Obsoleted Algorithms
- RFC 9390 Diameter Group Signaling
- RFC 9396 OAuth 2.0 Rich Authorization Requests
- RFC 9389 Nominating Committee Eligibility
- RFC 9397 Trusted Execution Environment Provisioning Architecture