Re: that private mailing list

2014-06-06 Thread Solar Designer
I've dropped CC to secur...@redhat.com, secur...@yandex.ru from this reply, because I don't feel like spamming them. I kept the CC to to...@yandex-team.ru, who I know is an OpenBSD user. On Thu, Jun 05, 2014 at 10:57:56PM -0600, Theo de Raadt wrote: > Solar and Kurt, a few questions: I think you

Re: that private mailing list

2014-06-05 Thread Solar Designer
I'll top-post this one time, to quote Chris' message in its entirety. I've dropped the CC to secur...@redhat.com - it felt too spammy to be sending them this. I've added Kurt, who is already involved in the discussion. Theo - Thank you for (apparently) forwarding my reply to your team. I was un

Re: that private mailing list

2014-06-05 Thread Chris Cappuccio
Theo de Raadt [dera...@cvs.openbsd.org] wrote: > From: Solar Designer > To: Theo de Raadt > > Hi Theo, > > I can't comment about OpenSSL folks, but my own impression certainly was > that you didn't want your project to be provided advance notification - > not only via distros list, but at all.

Re: that private mailing list

2014-06-05 Thread Theo de Raadt
> Would you like me to suggest (to whoever reports an issue) that someone > on your team (who?) be notified next time an OpenSSL issue is brought up > on distros? Solar and Kurt, a few questions: Your one-word answers to the following questions will decide your reputation regarding open source se