Jesse Ruderman wrote:

>How about having a sublist to which users can send reports of new security
>bugs, so not all members of the list have to recieve all the spam?
>
.../discussion.

Agreed. <[EMAIL PROTECTED]> should be reserved for new reports, not 
used for long discussion.

>Reporters are unlikely to care about the bug several months after it is
>fixed, and are even less likely to care enough to ask permission to open it.
>
Ex-act-ly.

>Reporters should have the *ability* to open bugs to the public, but they
>should not be relied upon to make their bugs public several months after the
>bugs are fixed.   That responsibility should lie elsewhere (hi BenB).
>
Wave :).

Reply via email to