Mailing-List: contact dev-help@community.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@community.apache.org
Subject: Re: Cross-project blog post?
To: dev@community.apache.org
References: <CACsi251N6yOtkYiPox7+YP7Utfe10iA-Qv4KRztNN9hQsr5RPA@mail.gmail.com>
 <CAEWfVJnNU24-Xs68-fR=1LDX9kme9-nRu61r2rXChFHC3xfz9g@mail.gmail.com>
 <CAD6VresbAV-QA4smccv-z5Gx2s-aFmAMuEWeJvhGYRbH-mn2kg@mail.gmail.com>
 <CACsi251e0QW_2_M=4R+j01V9nKKm0yqz8jk0X9ze_aijO3qQQg@mail.gmail.com>
 <CAEWfVJm5wNMLRtgRGc+SVcn8OJ3uhOYuJCzQNUTCXoy0jagDcQ@mail.gmail.com>
 <CABzHfVnDtbsa9Gi_2_3Fs-1dtaBp7yajOkrL1MHHk7xghrmD0A@mail.gmail.com>
 <CACsi253+8S1W7kUVAXFBmuy+GNYrw-A-aM=4EAx_gntYRzSQ+w@mail.gmail.com>
From: Rich Bowen <rbowen@rcbowen.com>
Message-ID: <3ebd2a57-7d1a-0941-a5f7-e2ec4eef5c2c@rcbowen.com>
Date: Wed, 20 Jul 2016 11:54:37 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <CACsi253+8S1W7kUVAXFBmuy+GNYrw-A-aM=4EAx_gntYRzSQ+w@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Wed, 20 Jul 2016 15:54:49 -0000

https://blogs.apache.org/foundation/entry/httpoxy_cgi_vulnerability_response


On 07/20/2016 10:35 AM, William A Rowe Jr wrote:
> On Wed, Jul 20, 2016 at 6:27 AM, Konstantin Kolinko <kkolinko@apache.org>
> wrote:
> 
>> 2016-07-20 12:37 GMT+03:00 Bertrand Delacretaz <bdelacretaz@apache.org>:
>>> On Tue, Jul 19, 2016 at 8:02 PM, William A Rowe Jr <wrowe@rowe-clan.net>
>> wrote:
>>>> What if we digest the audience and list the scope (different projects
>> which
>>>> are impacted/offering mitigations) in a more conversational tone,
>> mention
>>>> the httpoxy URL and just point the reader to
>>>> https://www.apache.org/security/asf-httpoxy-response.txt for all the
>>>> detailed workarounds we've offered?...
>>>
>>> That sounds good to me, here's a minimal suggestion that we might
>>> publish at https://blogs.apache.org/foundation/ unless you want
>>> something more complete.
>>>
>>> ***
>>> Title: "httpoxy" CGI vulnerability response
>>>
>>> A group of ASF projects (HTTP, Tomcat, Traffic Server, Perl) has
>>> analyzed the CGI application vulnerability recently published at
>>> https://httpoxy.org/
>>>
>>> Their detailed analysis, targeted at Web server administrators and CGI
>>> developers and including mitigation information, can be found at
>>> https://www.apache.org/security/asf-httpoxy-response.txt
>>> ***
>>
>>
>> I think that perl in list of ASF projects should be spelled "Perl
>> (mod_perl)",
>> to distinguish it from Perl programming language as a whole.
>>
>> Also HTTP in that list to be spelled "HTTP Server"
>>
> 
> Good points, think we can go with your text plus these edits, Bertrand.
> 
> Thanks!
> 
> Bill
> 


-- 
Rich Bowen - rbowen@rcbowen.com - @rbowen
http://apachecon.com/ - @apachecon

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@community.apache.org
For additional commands, e-mail: dev-help@community.apache.org