www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mark Thomas (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (INFRA-9728) security mailing list for Cordova
Date Thu, 28 May 2015 09:27:17 GMT

     [ https://issues.apache.org/jira/browse/INFRA-9728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Mark Thomas resolved INFRA-9728.

Note: Invalid since mailing lists requests should not be made via Jira.

https://www.apache.org/security/committers.html (which is primraily for Apache committers
to explain the process) implies (it is stated clearly on the primary security page  https://www.apache.org/security)
is that a security@tlp.a.o list is optional. As you'll see from https://www.apache.org/security/projects.html
most projects don't have one.

One can be created and given the importance / widespread use / size of the Cordova project
having security@cordova.a.o makes sense.

It would be a completely separate list and all messages to security@tlp.a.o are automatically
cc'd to security@a.o

If the Cordova PMC still wants this list then it should be requested via:

> security mailing list for Cordova
> ---------------------------------
>                 Key: INFRA-9728
>                 URL: https://issues.apache.org/jira/browse/INFRA-9728
>             Project: Infrastructure
>          Issue Type: Task
>            Reporter: Shazron Abdullah
> According to this: https://www.apache.org/security/committers.html
> A security reporter can email to security@PROJECT.apache.org ... but
> ...  the security@cordova.apache.org mailbox does not exist, can it be created? 
> Not sure if it has to be a totally separate mailbox, or it can just be an alias to private@cordova.apache.org
(alias is the most ideal)

This message was sent by Atlassian JIRA

View raw message