[OPEN-ILS-DEV] Security team coordination

[Joe Atzberger]

On Wed, Dec 22, 2010 at 11:23 AM, Jason Etheridge <jason at esilibrary.com>wrote:

> > One thing that we should discuss is a policy for the archives of the
> security mailing list.  I propose that the mailing list be publicly archived
> but under a one-year embargo.  This would allow communications to be
> transparent (ultimately) and provide an incentive to not let security issues
> sit fallow while allowing us to try to release fixes for major security
> issues before exploits are published.
>

Another +1.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://libmail.georgialibraries.org/pipermail/open-ils-dev/attachments/20101222/4967f77a/attachment.htm