Re: Re: Security e-mail address

we were going to set up security@php.net at one point with a closed list of recieptients.. mainly core devs and a few QA People who can check out if it is a security problem or not. Dont think this ever happen. Perhaps it would be an idea though - James ----- Original Message ----- From: "Rasmus Lerdorf" <rasmus@php.net> To: "Jani Taskinen" <sniper@iki.fi> Cc: "Flavio Veloso" <flaviovs@magnux.com>; <webmaster@php.net>; <php-dev@lists.php.net> Sent: Saturday, October 06, 2001 2:21 AM Subject: [PHP-DEV] Re: Security e-mail address > Oh Jani, relax. He wanted somewhere non-public. php-dev is archived > everywhere as is webmaster@php.net. group@ is the only non-archived > address. If there is a real problem we will most definitely forward it to > php-dev, but if someone asks for a private contact address I give the only > one we have. Most of these are false alarms anyway. > > -Rasmus > > On Sat, 6 Oct 2001, Jani Taskinen wrote: > > > > > What's wrong with php-dev? IIRC the group@php.net handles > > only administration of the site and stuff.. > > There can't be anything that fatal that all the people > > subscribed to php-dev shouldn't see. Or has PHP suddenly > > changed into closed-source? > > > > --Jani > > > > > > > > On Fri, 5 Oct 2001, Rasmus Lerdorf wrote: > > > > >use group@php.net please > > > > > >On Fri, 5 Oct 2001, Flavio Veloso wrote: > > > > > >> Hi Webmaster. > > >> > > >> Is there any mail address that can be used to discuss security issues > > >> related to PHP? > > >> > > >> We know that we could use your bug tracking system to report problems, > > >> but it doesn't seem appropriate to disclose a security bug before PHP > > >> developers have a chance to look at it. > > >> > > >> We are a Linux and network security research company that lives in > > >> Brazil. Maybe we have discovered a problem which has some security > > >> implications. We are not completely sure if it's a bug in PHP (and how > > >> to solve it, even if it isn't), and would like to share it with the > > >> PHP people privately. > > >> > > >> BTW, sorry to bother you with this, but your mail address was the only > > >> one I could find on the www.php.net website. > > >> > > >> > > > > > > > > -- > PHP Development Mailing List <http://www.php.net/> > To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net > For additional commands, e-mail: php-dev-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >