STIX Arrays/Lists: Empty vs Null

[Stephen Russett <stephen@digitalstate.ca>]

X-post from:Âhttps://github.com/oasis-tcs/cti-stix2/issues/144

Has there been any docs created around where/when a distinction should be made between a null and empty array for all of the objects in the spec?

Where a null could mean not provided, and empty means ânone to reportâ.

Example being a Email Message COO, you have a List ofÂtoÂRecipients. Should this be returned as a empty array or considered null? Where null could indicate that âwe don't know what the value wasâ, and an empty array can indicate that we are confirming that there are no values in theÂtoÂproperty.

Is anyone currently implementing this in their spec build?

Thanks!

Stephen