Re: Private channel for reporting security issues

2018-03-02 Thread Von Gosling
Agree, security issues could be moved on the private email list to discuss :-) Best Regards, Von Gosling > 在 2018年3月2日,11:59,Justin Mclean 写道: > > Note that as an exception to the usual talk about it on the dev list > dicussion should be kept to private lists to

Re: Private channel for reporting security issues

2018-03-02 Thread Mark Thomas
On 02/03/18 03:23, Huxing Zhang wrote: > Hi Mark, > > Thanks for the information. > In that case, I am +1 for secur...@dubbo.apache.org. > > Further question: if the venerability report is related to some > project Dubbo depends on, what kind of action should Dubbo security > team take? > >