Re: Security e-mail address

Oh Jani, relax. He wanted somewhere non-public. php-dev is archived everywhere as is webmaster@php.net. group@ is the only non-archived address. If there is a real problem we will most definitely forward it to php-dev, but if someone asks for a private contact address I give the only one we have. Most of these are false alarms anyway. -Rasmus On Sat, 6 Oct 2001, Jani Taskinen wrote: > > What's wrong with php-dev? IIRC the group@php.net handles > only administration of the site and stuff.. > There can't be anything that fatal that all the people > subscribed to php-dev shouldn't see. Or has PHP suddenly > changed into closed-source? > > --Jani > > > > On Fri, 5 Oct 2001, Rasmus Lerdorf wrote: > > >use group@php.net please > > > >On Fri, 5 Oct 2001, Flavio Veloso wrote: > > > >> Hi Webmaster. > >> > >> Is there any mail address that can be used to discuss security issues > >> related to PHP? > >> > >> We know that we could use your bug tracking system to report problems, > >> but it doesn't seem appropriate to disclose a security bug before PHP > >> developers have a chance to look at it. > >> > >> We are a Linux and network security research company that lives in > >> Brazil. Maybe we have discovered a problem which has some security > >> implications. We are not completely sure if it's a bug in PHP (and how > >> to solve it, even if it isn't), and would like to share it with the > >> PHP people privately. > >> > >> BTW, sorry to bother you with this, but your mail address was the only > >> one I could find on the www.php.net website. > >> > >> > > >