HEADS UP Re: Changing `[e-mail]' alias

Hello again,

The change discussed earlier has been made.  Email to
<[e-mail]> now reaches the security team rather than any
public list.

If you find any references to <[e-mail]> as a public list,
please let me know.  It appears that there were none on the web site
or handbook or FAQ, but there could be some I missed.

Cheers,
-- 
Jacques Vidrine / [e-mail] / [e-mail] / [e-mail]

On Wed, Apr 07, 2004 at 10:42:20AM -0500, Jacques A. Vidrine wrote:
> Hello Folks,
> 
> The official email address for this list is
> `[e-mail]'.  Due to convention, there is an email
> alias for this list: [e-mail], just as there is for
> hackers@ & freebsd-hackers@, arch@ & freebsd-arch@, and so on.
> 
> The [e-mail] alias has been the source of occassional
> problems.  Several times in the past, postings have been made to that
> address under the assumption that address was directed to security
> response personnnel, and not a public mailing list.  Of course, this
> was a reasonable assumption.  Practically every vendor in the universe
> uses security@ for that purpose, largely because RFC 2142 strongly
> recommends it for that purpose.
> 
> And sometimes one just makes a typo.  It has not been
> too uncommon for people to forget the `-officer' part of
> `[e-mail]'.  (Yours truly has been guilty of
> this.)
> 
> Mistaken early disclosure of a vulnerability can have consequences
> from the merely embarrasing to catastrophic.  Therefore, I am
> proposing that `[e-mail]' be re-routed to the Security
> Officer.
> 
> I imagine this will have some significant impact: there must be
> many references to [e-mail] as a public list out there.
> So, I thought I'd air the issue here before sending any request to
> postmaster@.
> 
> Cheers,
> -- 
> Jacques Vidrine / [e-mail] / [e-mail] / [e-mail]
> _______________________________________________
> [e-mail] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "[e-mail]"
> 
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"