On Fri, Jul 29, 2011 at 5:14 PM, Daniel Shahaf <d...@daniel.shahaf.name> wrote: > Rob Weir wrote on Fri, Jul 29, 2011 at 16:55:06 -0400: >> For example, I'm not seeing at any stage where we would bring >> a summary of a reported vulnerability to the PPMC, even on the private >> list. > > The PPMC could, for example, be on the pre-notification list once the fix > is done. >
Excellent point. -Rob
