Top-level Sighting Object from last meeting

Adding cti-taxii (it involves taxii talk)  I'm still of the opinion that this falls under the realm of STIX. Joep's comment that the question/answer functionality needs to work across non-TAXII communication methods made the decision for me.
If we add that functionality to TAXII and not STIX then we lose the ability to request and respond if TAXII isn't used.
I'm now wondering if we should have some kind of combination of TAXII and STIX query functionality....  What if TAXII handled the TAXII to TAXII content distribution (delivery of CTI content), and the querying of a local TAXII repository (local TAXII client to local TAXII Server lookup if it has a data repo).  And what if STIX handled any threat intel questions asked of the sharing community via STIX request and STIX response?
This separation would allow STIX request/responses to still be asked even if communication was via email (imagine attaching that to a post to an email community) allowing people who do have a STIX implementation but no TAXII implementation to participate in Threat Intel sharing. It may even help drive STIX/TAXII adoption by prompting more people to start using STIX...  Cheers  Terry MacDonald Senior STIX Subject Matter Expert SOLTRA   An FS-ISAC and DTCC Company +61 (407) 203 206