Re: [cti] CybOX Datatype Refactoring/Deprecation

["Kirillov, Ivan A." <ikirillov@mitre.org>]

Now that we’ve voted to not support defanging, the question remains as to whether we should support obfuscation and capture of observed encoding on CybOX Object fields:

• Obfuscation example: XXXX@yahoo.com or YYYY@comcast.com. Also used for URLs. 
• Observed encoding: utf-8, etc. Mostly relevant for malware analysis and attribution, e.g., if an actor is known to use a particular encoding in their comment strings.

Regards,

Ivan