The document had a bunch of problems, and there were parts I disagreed
with, but it is clear to me that some sort of "best practices" needs to be
agreed to in this area. I also agree that this sort of document should not
be coordinated through the IETF, and was glad to see it withdrawn as a
potential standard.
Bruce
- Re: Status of draft-christey-wysopal-vuln-disclosure-0... Donald Eastlake 3rd
- Re: Status of draft-christey-wysopal-vuln-disclos... Robert Elz
- Re: Status of draft-christey-wysopal-vuln-dis... Florian Weimer
- Re: Status of draft-christey-wysopal-vuln-disclosure-0... Jason Coombs
- RE: Re: Status of draft-christey-wysopal-vuln-dis... Jason Coombs
- Re: Status of draft-christey-wysopal-vuln-dis... Valdis . Kletnieks
- Re: Status of draft-christey-wysopal-vuln... Florian Weimer
- Re: Status of draft-christey-wysopal-... Valdis . Kletnieks
- Re: Status of draft-christey-wysopal-... Chris Wysopal
- Re: Status of draft-christey-wys... Florian Weimer
- Re: Status of draft-christey-wysopal-vuln-disclosure-0... Bruce Schneier
- Re: Status of draft-christey-wysopal-vuln-disclosure-0... Steven M. Christey
