2 ms·
So, people are definitely misinterpreting my suggestion. This is my fault, as looking back I stated it pretty badly. The goal is to give businesses who are al
by amalcon 13y ago
So, people are definitely misinterpreting my suggestion. This is my fault, as looking back I stated it pretty badly.
The goal is to give businesses who are already in the early-warning club an excuse to write $10k checks every month. The intention was not to solicit anyone and everyone.
It would continue to only be offered to organizations who are (in the collective opinions of the OpenSSL project leaders) going to neither leak nor use the vulnerability -- exactly what happens today.
They would be allowed to (and, I'd hope, would) waive the fee if a major stakeholder were obstinate about it, because (I hope) they actually care about the security of the Internet.
- judk 13y agoYour proposal is still bad :-) but the good faith attitude with which you engaged responders is a model for mature discourse.