On 2004-08-04, Chris Hofmann <[EMAIL PROTECTED]> wrote:
>
> Asa and I were just talking about an idea of turning the vulerability 
> page into an RSS feed.   that would allow users to get updates as soon 
> as we posted anything new to the vulerability list...  anyone have 
> thoughts on this?

Sounds neat in principle, but I'm not sure that really addresses the
issue.  There's not much point in having an RSS feed if the list is only
updated once every 6-9 months.  Even if it was updated in a timely fashion
after each release, that's still going to mean a pile of updates every few
months (unless there are lots of x.x.1/2/3 releases, but hopefully this
batch isn't going to become typical).

There's also not much point in having an RSS feed if you have to find it
by going to www.mozilla.org and "known vulnerabilities" into the search
engine box.  The new "security center" is currently linked from the news
item announcing it, but that link will drop off.  Would be good to link
the pages up.

AIUI, security problems are publicised after a release where they've been
fixed. So the security RSS feed will be pretty much in sync with the
release info that's already in the main mozilla.org RSS news feed.

Lots of people know and understand email.  Pretty much every organisation
and product out there has an email list you can sign up for.  The original
poster's request is one that comes up regularly - to get emailed news
about Mozilla.  I think what would be good is a mailing list of the main
mozilla.org news feed.

By way of current alternatives for the original poster:
Most releases make it into n.p.m.announce, which has a mailing list. You
can sign up from http://www.mozilla.org/community/developer-forums.html
- the announce group labelled "New source releases will be announced here"
doesn't make it obvious that that would be a good place to sign up for
emailed news about Mozilla products, but...

There's also the Mozilla newsletter, but that's again not very
discoverable ( http://nostalsong.com/mozillalinks/ ) and it seems to be
monthly, which means it mentions releases up to 4 weeks after they happen.

-- 
Michael
_______________________________________________
Mozilla-security mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to