cti-comment message

Subject: Indicator: valid_until

From: Drew Varner <drew.varner@ninefx.com>
To: "cti-comment@lists.oasis-open.org" <cti-comment@lists.oasis-open.org>
Date: Thu, 1 Jun 2017 13:36:22 -0400

Should there be a requirement in Indicator that `valid_until` occurs after `valid_from` in Indicator objects? I don’t see the requirement in stix-v2.0-csprd02-part2-stix-objects.

Follow-Ups:
- Re: [cti-comment] Indicator: valid_until
  - From: Sarah Kelley <Sarah.Kelley@cisecurity.org>