Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Dennis E. Hamilton
We are in a very fledgling situation here. Let's see if we can clear up a few things. Here is my understanding of the situation as it exists at the moment. - Dennis 1. The ooo-security@i.a.o list is private and moderated. Anyone can send a message to the list. The three current

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Daniel Shahaf
Dennis E. Hamilton wrote on Fri, Jul 29, 2011 at 13:28:01 -0700: We are in a very fledgling situation here. Let's see if we can clear up a few things. Here is my understanding of the situation as it exists at the moment. - Dennis 1. The ooo-security@i.a.o list is private and

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Rob Weir
On Fri, Jul 29, 2011 at 4:28 PM, Dennis E. Hamilton orc...@apache.org wrote: We are in a very fledgling situation here.  Let's see if we can clear up a few things. Here is my understanding of the situation as it exists at the moment.  - Dennis  1. The ooo-security@i.a.o list is private

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Daniel Shahaf
Rob Weir wrote on Fri, Jul 29, 2011 at 16:55:06 -0400: For example, I'm not seeing at any stage where we would bring a summary of a reported vulnerability to the PPMC, even on the private list. The PPMC could, for example, be on the pre-notification list once the fix is done.

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Rob Weir
On Fri, Jul 29, 2011 at 5:14 PM, Daniel Shahaf d...@daniel.shahaf.name wrote: Rob Weir wrote on Fri, Jul 29, 2011 at 16:55:06 -0400: For example, I'm not seeing at any stage where we would bring a summary of a reported vulnerability to the PPMC, even on the private list. The PPMC could, for

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Dave Fisher
anything from an unknown sender yet, so we can know for sure. - Dennis -Original Message- From: Daniel Shahaf [mailto:d...@daniel.shahaf.name] Sent: Friday, July 29, 2011 13:42 To: ooo-dev@incubator.apache.org Subject: Re: Operating ooo-security (was RE: Population of ooo-security

RE: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Dennis E. Hamilton
@incubator.apache.org Subject: Re: Operating ooo-security (was RE: Population of ooo-security) I just sent in a test email from my work email. Please do not divulge my employer. (Ah these corporate rules ;-) Regards, Dave On Jul 29, 2011, at 2:54 PM, Dennis E. Hamilton wrote: You're probably right

Re: Operating ooo-security (was RE: Population of ooo-security)

2011-07-29 Thread Rob Weir
:42 To: ooo-dev@incubator.apache.org Subject: Re: Operating ooo-security (was RE: Population of ooo-security) Dennis E. Hamilton wrote on Fri, Jul 29, 2011 at 13:28:01 -0700: We are in a very fledgling situation here.  Let's see if we can clear up a few things. Here is my understanding