Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: ooo-dev@incubator.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
Message-ID: <4E9EEF8B.4020105@shanecurcuru.org>
Date: Wed, 19 Oct 2011 11:40:59 -0400
From: Shane Curcuru <asf@shanecurcuru.org>
User-Agent: Mozilla/5.0 (Windows NT 5.1;
 rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1
MIME-Version: 1.0
To: ooo-dev@incubator.apache.org
Subject: Re: Neutral / shared security list ...
References: <1319037389.83728.YahooMailMobile@web113502.mail.gq1.yahoo.com>
 <CAA4ffp8Ds25ExcE9O_GTR0h3id6m2ZCNMRxDne57kt-gtpvj_w@mail.gmail.com>
In-Reply-To: 
 <CAA4ffp8Ds25ExcE9O_GTR0h3id6m2ZCNMRxDne57kt-gtpvj_w@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 10/19/2011 11:28 AM, Simon Phipps wrote:
> On Wed, Oct 19, 2011 at 4:16 PM, Pedro Giffuni<pfg@apache.org>  wrote:
>
>>   -1
>> The Apache Foundation *IS* neutral.
>> Beyond the evident open wounds the previous relationship with SUN/Oracle
>> may have left in the community, the OpenOffice.org domain is the natural
>> reference for longtime users and the developers of the many forks.
>>
>
> I agree, but the problem is one not of the neutrality of the trademark owner
> but rather the practical neutrality of the administration of the shared
> list.  Is the project happy for the list administration to be shared with
> others outside Apache?
>
> If so (and if it actually happened!) I would share your vote and re-iterate
> my earlier proposal that securityteam@openoffice.org be used.
>
> S.

I'm confident that the Apache security team and specific members of AOOo 
PPMC could arrange a suitable adminstration structure to satisfy any 
reputable security-minded contributor in the OOo world.  While some of 
us may have significant differences elsewhere, I hope (and presume) that 
we all take security seriously enough to do it correctly.

And given that the existing s@oo.o email address is already plastered 
over archives and search results and millions of user's existing 
installs, keeping the same email address is a huge bonus in terms of 
capturing security issues from less technical end-users.

In terms of reliability, that should not be an issue once we are hosting 
the mailing lists at the ASF and the Apache infra team has full access 
to maintain the lists up to the same standards as our other lists.

- Shane