Re: Security e-mail address

What's wrong with php-dev? IIRC the group@php.net handles only administration of the site and stuff.. There can't be anything that fatal that all the people subscribed to php-dev shouldn't see. Or has PHP suddenly changed into closed-source? --Jani On Fri, 5 Oct 2001, Rasmus Lerdorf wrote: >use group@php.net please > >On Fri, 5 Oct 2001, Flavio Veloso wrote: > >> Hi Webmaster. >> >> Is there any mail address that can be used to discuss security issues >> related to PHP? >> >> We know that we could use your bug tracking system to report problems, >> but it doesn't seem appropriate to disclose a security bug before PHP >> developers have a chance to look at it. >> >> We are a Linux and network security research company that lives in >> Brazil. Maybe we have discovered a problem which has some security >> implications. We are not completely sure if it's a bug in PHP (and how >> to solve it, even if it isn't), and would like to share it with the >> PHP people privately. >> >> BTW, sorry to bother you with this, but your mail address was the only >> one I could find on the www.php.net website. >> >> >