[60058] in North American Network Operators' Group
public comment period for oisafety.org's vulnerability process
daemon@ATHENA.MIT.EDU (Paul Vixie)
Thu Jul 31 01:15:34 2003
From: Paul Vixie <paul@vix.com>
To: nanog@merit.edu
Date: Thu, 31 Jul 2003 05:14:51 +0000
Errors-To: owner-nanog-outgoing@merit.edu
http://www.oisafety.org/ announced the GA version of "guidelines for security
vulnerability reporting and response process, v1.0", whose URL is
http://www.oisafety.org/reference/process.pdf
this is asynchronous to the NIAC presentation jim duncan gave at the
last nanog, but it's related/similar, and there's a public comment period,
and it's a worthwhile read, or an opportunity to flame somebody, or whatever.
oisafety.org is the organization for internet safety, btw.