Mailing-List: contact dev-help@community.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@community.apache.org
MIME-Version: 1.0
In-Reply-To: <CABzHfVnDtbsa9Gi_2_3Fs-1dtaBp7yajOkrL1MHHk7xghrmD0A@mail.gmail.com>
References: <CACsi251N6yOtkYiPox7+YP7Utfe10iA-Qv4KRztNN9hQsr5RPA@mail.gmail.com>
 <CAEWfVJnNU24-Xs68-fR=1LDX9kme9-nRu61r2rXChFHC3xfz9g@mail.gmail.com>
 <CAD6VresbAV-QA4smccv-z5Gx2s-aFmAMuEWeJvhGYRbH-mn2kg@mail.gmail.com>
 <CACsi251e0QW_2_M=4R+j01V9nKKm0yqz8jk0X9ze_aijO3qQQg@mail.gmail.com>
 <CAEWfVJm5wNMLRtgRGc+SVcn8OJ3uhOYuJCzQNUTCXoy0jagDcQ@mail.gmail.com> <CABzHfVnDtbsa9Gi_2_3Fs-1dtaBp7yajOkrL1MHHk7xghrmD0A@mail.gmail.com>
From: William A Rowe Jr <wrowe@rowe-clan.net>
Date: Wed, 20 Jul 2016 09:35:36 -0500
Message-ID: <CACsi253+8S1W7kUVAXFBmuy+GNYrw-A-aM=4EAx_gntYRzSQ+w@mail.gmail.com>
Subject: Re: Cross-project blog post?
To: ComDev <dev@community.apache.org>
Content-Type: multipart/alternative; boundary=001a1143f3525ea2bc0538121d52
archived-at: Wed, 20 Jul 2016 14:35:51 -0000

--001a1143f3525ea2bc0538121d52
Content-Type: text/plain; charset=UTF-8

On Wed, Jul 20, 2016 at 6:27 AM, Konstantin Kolinko <kkolinko@apache.org>
wrote:

> 2016-07-20 12:37 GMT+03:00 Bertrand Delacretaz <bdelacretaz@apache.org>:
> > On Tue, Jul 19, 2016 at 8:02 PM, William A Rowe Jr <wrowe@rowe-clan.net>
> wrote:
> >> What if we digest the audience and list the scope (different projects
> which
> >> are impacted/offering mitigations) in a more conversational tone,
> mention
> >> the httpoxy URL and just point the reader to
> >> https://www.apache.org/security/asf-httpoxy-response.txt for all the
> >> detailed workarounds we've offered?...
> >
> > That sounds good to me, here's a minimal suggestion that we might
> > publish at https://blogs.apache.org/foundation/ unless you want
> > something more complete.
> >
> > ***
> > Title: "httpoxy" CGI vulnerability response
> >
> > A group of ASF projects (HTTP, Tomcat, Traffic Server, Perl) has
> > analyzed the CGI application vulnerability recently published at
> > https://httpoxy.org/
> >
> > Their detailed analysis, targeted at Web server administrators and CGI
> > developers and including mitigation information, can be found at
> > https://www.apache.org/security/asf-httpoxy-response.txt
> > ***
>
>
> I think that perl in list of ASF projects should be spelled "Perl
> (mod_perl)",
> to distinguish it from Perl programming language as a whole.
>
> Also HTTP in that list to be spelled "HTTP Server"
>

Good points, think we can go with your text plus these edits, Bertrand.

Thanks!

Bill

--001a1143f3525ea2bc0538121d52--