< Return to Ballot details

Vote Details

Ballot: Approve of the TC proceeding with the development of the comment object as a merge of the intel note and opinion objects
DHS Office of Cybersecurity and Communicat...
One of the guiding principles of STIX 2 was that we would try to have each object do one thing well. As such I think this points in the direction of two separate objects. One thing to consider is that while I think Intel Notes would largely be produced and consumed by humans, the vast majority of Opinions may be consumed, and perhaps produced, by machines. Once we deploy STIX solutions that support opinions we may find that we want to add additional properties that would be useful but that increase the semantic distance between Opinion and Intel Note. As separate objects this is easy - as a consolidated Comment object it could get messy fast.