417 B
417 B
ICSCISA / KISA Feed Provenance Notes (2025-11-19)
- Expected signing: not provided by sources; set
signature=nullandskip_reason="unsigned". - Hashing: sha256 of raw advisory payload before normalization.
- Transport: HTTPS; mirror to internal cache; record
fetched_atUTC andsource_url. - Verification: compare hash vs previous run; emit delta report.
- Staleness guard: alert if
fetched_at>14 days.