Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Solar Designer <solar-cxoSlKxDwOJWk0Htik3J/w <at> public.gmane.org>
Subject: distros & linux-distros embargo period and message format
Newsgroups: gmane.comp.security.oss.general
Date: Friday 20th January 2012 09:44:45 UTC (over 4 years ago)
Hi,

I've just updated the wiki page at:

http://oss-security.openwall.org/wiki/mailing-lists/distros

to state the following:

"Please note that the maximum acceptable embargo period for issues
disclosed to these lists is 14 to 19 days, with embargoes longer than 14
days (up to 19) allowed in case the issue is reported on a Thursday or a
Friday and the proposed coordinated disclosure date is thus adjusted to
fall on a Monday or (preferably) a Tuesday.  Please do not ask for a
longer embargo.  In fact, embargoes shorter than 14 days are preferable."

Previously, the maximum was specified as 14 days unconditionally, but
frankly this started to fail in practice for the day-of-week reason -
so I've adjusted the policy as above (based on proposals from list
members).

While at it, I've also added this clarification on the format of messages:

"Speaking of encryption, the supported message formats are: plain
unencrypted messages, PGP/MIME (including with attachments), or inline
PGP.  (In all of these cases, messages are distributed to list members
(re-)encrypted to their own keys.)  However, manual PGP-encrypted
attachments are not supported (so if you want to attach file(s) to your
encrypted message, use PGP/MIME)."

Alexander
 
CD: 3ms