Today I asked a question about potential security vulnerabilities associated with different ways of implementing a piece of software. I received a vote to close the question on the grounds that it is "primarily opinion-based" (as well as a downvote around the same time).
For context, I rarely post on Stack Overflow, so I'm not familiar with the conventions here. However I'm a regular contributor on the Mathematics Stack Exchange, where questions such as "Can my proof be simplified?" or "What are some important applications of Theorem X?" are rarely viewed as being "opinion-based", and are often well received. On the Mathematics Stack Exchange, an "opinion-based" question would be something like "Is algebra more difficult than geometry?". So, based on this prior experience, I wouldn't have expected that a question about potential security vulnerabilities associated with different implementations of software would be viewed as opinion-based on Stack Overflow. I could well have made a mistake, but it wasn't done intentionally.
What I'd like to know is:
- Is there any way my question could be made less opinion-based so as to receive an answer (and contribute in a positive way to the site)?
- Or, if my question is irredeemable, then is there some other place where I can get my question answered - perhaps some other Stack Exchange site that uses different criteria for assessing whether a question is opinion-based?
- In future, should I refrain from asking about the security implications of software design choices on this site?
By the way, I've done some digging on meta...
- This meta post says that one should avoid asking about "best practices" on Stack Overflow. This is useful to know - though I'm not sure this advice is applicable to me because I'm asking about concrete security vulnerabilities that could result from a given design choice as opposed to best practices.
- This meta post suggests the Software Engineering Stack Exchange as a place to ask questions about dev process - though again, I'm not sure how relevant this is to me because my question isn't exactly about dev process. I could also try the Information Security Stack Exchange - but that doesn't feel right either since that that site is for information security professionals, whereas I'm a developer.
- This meta post distinguishes between opinion and expertise. It suggests that questions seeking expertise are acceptable here. But then, this meta post suggests that any question that would answered with the words "I favour" or "I would probably" are opinion-based. I'm struggling to reconcile these views.