Mailing-List: contact dev-help@ofbiz.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ofbiz.apache.org
Subject: Re: [VOTE] Create the "security" mailing list for the OFBiz project
To: dev@ofbiz.apache.org
References: <CALzBqrbXiMju=g9DvnZEsp6h3FHgN8PKbLRy37YtcyKFRa610A@mail.gmail.com>
From: Nicolas Malin <nicolas.malin@nereide.fr>
Organization: =?UTF-8?B?TsOpcsOpaWRl?=
Message-ID: <25ae11b2-40c3-e691-4bcf-cb011ae793e5@nereide.fr>
Date: Mon, 25 Jul 2016 09:22:51 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <CALzBqrbXiMju=g9DvnZEsp6h3FHgN8PKbLRy37YtcyKFRa610A@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
archived-at: Mon, 25 Jul 2016 07:22:59 -0000

+1

Le 24/07/2016 à 14:32, Jacopo Cappellato a écrit :
> Rationale: every ASF project needs a private list to discuss product
> vulnerabilities; for OFBiz the "private" list has been used for this
> purpose until now; however an ad-hoc list may be useful because it could
> provide a more focused space to discuss the security issues and could
> provide more flexibility to invite in the private list persons willing to
> help that are trusted by the PMC.
>
> Please vote,
>
> +1
>
> to create a "security" list (i.e. security@ofbiz.apache.org) and move all
> the security related discussions and notifications currently happening on
> the private list to this new list: according to the ASF policies [*] the
> list will be a private list used by the persons willing to help to resolve
> security issues; the list of subscribers will be approved by the OFBiz PMC.
>
> Otherwise vote -1 to continue to use the "private" mailing list for
> vulnerability handling.
>
> [*] http://www.apache.org/security/
>