7 ms·
It would be nice if he'd said that, rather than "Well, they just don't." which completely misrepresents the situation. AFAIK, he has never requested such a thin
by rlpb 12y ago
It would be nice if he'd said that, rather than "Well, they just don't." which completely misrepresents the situation. AFAIK, he has never requested such a thing, anyway. The only requests I see come from third party apologists, not from him.
He just complains that they don't give him access, when in fact they offered him access.
> Theo meant he has no time to join yet another mailing list where OpenSSL security issues are very likely way less an 1% of the messages.
Is it really that hard to filter for /openssl/i/?
- deleted 12y ago[deleted]
- worklogin 12y agoIs it really that hard to have a vulnerabilities mailer for important stuff?
- rlpb 12y agoYou've just described the mailing list that de Raadt refuses to join.
- worklogin 12y agoFrom the context, it sounds like he was asked to join a linux distro security mailer, which wouldn't make sense. Isn't there an OpenSSL mailer for this stuff?
- gpvos 12y agoThere are two lists: linux-distros and distros, the latter including FreeBSD and NetBSD. (Why is OpenSolaris - or whatever it's called this year - not in there too?) Nevertheless, it should be doable for OpenSSL to also mail LibreSSL; it is a bit of a special case, after all.
- tedunangst 12y agoWe asked for advance notice in the past. We received advance notice in the past. This time we didn't. Now we did, again.