Re: [cti-stix] Re: [EXT] Re: [cti-stix] Updated report proposal

[Trey Darley <trey@newcontext.com>]

On 20.09.2017 19:26:15, Wunder, John A. wrote:
> I agree with this.
> 
> All, to sum up a long conversation we (myself, Bret, Andras,
> Alexandre, Sean, Jason) had on Slack…it seems like people are
> converging around the following option:
> 
> 
> * Add a new SDO called “Grouping” (two object approach)
> * Grouping will not have a separate status or published field.
>   Instead, we’ll have a label with the name “unverified”, and in the
>   specification it will be explicitly defined as unverified
>   information that the producer considers too preliminary to
>   automate on.
>   * No changes to Report
> 

We've collectively burned a ton of cycles on this topic. While I
remain unconvinced by the arguments that an additional SDO is
necessary, it seems like we could just flip a coin and either outcome
would be fine.

In the interest of moving on to other pressing topics, I support the
Grouping proposal John put forward.

-- 
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"Conservative, n.: One who admires radicals centuries after they're
dead." --Leo Rosten

Attachment: signature.asc
Description: Digital signature