> "Responsible disclosure" is an invention of vendors who want you conforming to their policies and timelines (and more). Ridiculous. Please don't put out this

> "Responsible disclosure" is an invention of vendors who want you conforming to their policies and timelines (and more). Ridiculous. Please don't put out this kind of nonsense. Responsible disclosure is to protect the users of software. Supply chains cannot and do not respond instantaneously. You cannot fix a security problem within microseconds. There MUST be some delay between disclosure to the software provider and the actual release. Otherwise you're just endangering the public. How much delay is certainly a point of discussion, but no one is saying "no delay".