Fwd: [security] Reporting a Security Issue

[Johannes Ernst]

Probably of interest to general@ as well ...

Begin forwarded message:

> From: Johannes Ernst <jernst+openid.net at netmesh.us>
> Date: October 26, 2006 15:03:37 PDT
> To: security at openid.net
> Subject: [security] Reporting a Security Issue
>
> The wiki
>     http://openid.net/wiki/
> now has a section on "Reporting a Security Issue" (under "Security")
>
> The idea is that every time anybody believes they have found a  
> security issue, there is (the beginning of a very simple) process  
> by which this issue can be reported and resolved; and by which the  
> issue and its resolution can be captured for others to see.
>
> Obviously, the process can and will evolve. Right now, it's basically:
>  - make sure you have identified a valid issue and it hasn't been  
> reported before
>  - discuss on this mailing list
>  - we write it up on the wiki -- whether valid or not, because  
> others will have the same issue sooner or later.
>
> Which is a whole lot better than what we had before, which was  
> nothing ;-)
>
>
>
>
> Johannes Ernst
> NetMesh Inc.
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pastedGraphic.tiff
Type: image/tiff
Size: 1962 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061026/297c0d21/attachment-0004.tiff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lid.gif
Type: image/gif
Size: 973 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061026/297c0d21/attachment-0004.gif>
-------------- next part --------------
>  http://netmesh.info/jernst
>
>
>
>
>
> _______________________________________________
> security mailing list
> security at openid.net
> http://openid.net/mailman/listinfo/security

Johannes Ernst
NetMesh Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: pastedGraphic.tiff
Type: image/tiff
Size: 1962 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061026/297c0d21/attachment-0005.tiff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lid.gif
Type: image/gif
Size: 973 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061026/297c0d21/attachment-0005.gif>
-------------- next part --------------
  http://netmesh.info/jernst