Re: Security e-mail address

So what's wrong in keeping them public? If they are false alarms, why not keep them public and show all other people who think they found serious security related bugs that they are wrong? If it's opensource KEEP it open. There can't be any closed 'groups' which get some info in this kind of projects. If there are, it's no longer opensource..IMO. --Jani On Fri, 5 Oct 2001, Rasmus Lerdorf wrote: >Oh Jani, relax. He wanted somewhere non-public. php-dev is archived >everywhere as is webmaster@php.net. group@ is the only non-archived >address. If there is a real problem we will most definitely forward it to >php-dev, but if someone asks for a private contact address I give the only >one we have. Most of these are false alarms anyway. > >-Rasmus > >On Sat, 6 Oct 2001, Jani Taskinen wrote: > >> >> What's wrong with php-dev? IIRC the group@php.net handles >> only administration of the site and stuff.. >> There can't be anything that fatal that all the people >> subscribed to php-dev shouldn't see. Or has PHP suddenly >> changed into closed-source? >> >> --Jani >> >> >> >> On Fri, 5 Oct 2001, Rasmus Lerdorf wrote: >> >> >use group@php.net please >> > >> >On Fri, 5 Oct 2001, Flavio Veloso wrote: >> > >> >> Hi Webmaster. >> >> >> >> Is there any mail address that can be used to discuss security issues >> >> related to PHP? >> >> >> >> We know that we could use your bug tracking system to report problems, >> >> but it doesn't seem appropriate to disclose a security bug before PHP >> >> developers have a chance to look at it. >> >> >> >> We are a Linux and network security research company that lives in >> >> Brazil. Maybe we have discovered a problem which has some security >> >> implications. We are not completely sure if it's a bug in PHP (and how >> >> to solve it, even if it isn't), and would like to share it with the >> >> PHP people privately. >> >> >> >> BTW, sorry to bother you with this, but your mail address was the only >> >> one I could find on the www.php.net website. >> >> >> >> >> > >> >