Need for a computer security contact - php VEND#535318

From: Date: Wed, 11 Oct 2006 21:09:35 +0000
Subject: Need for a computer security contact - php VEND#535318
Groups: php.mirrors 
Request: Send a blank email to php-mirrors+get-33037@lists.php.net to get a copy of this message
-----BEGIN PGP SIGNED MESSAGE----- Hello Folks: The CERT Coordination Center (CERT/CC) is a center of Internet security expertise, located at the Software Engineering Institute, a federally funded research and development center. Part of our Charter is to coordinate the deployment of information relating to internet security vulnerabilities, and to work with vendors to ensure that appropriate information is published for users of their products, and, when possible, to assist in the deployment of patches. At this time, we are aware of a problem with one of your products. We are interested in establishing a formal contact with The PHP Group to facilitate the coordination of vulnerability remediation. Given the sensitive nature of the information typically exchanged during the vulnerability remediation process, we are interested in exchanging PGP or GnuPG keys with The PHP Group to ensure secure communication. Please follow the steps listed below to begin the key exchange process: 1. You generate a PGP or GnuPG key pair if you do not already have one. 2. You then send the public key to <cert@cert.org> via email signed with that key. Please include "VEND#535318" in the subject line of your email message. 3. We will then contact you out-of-band via a trusted telephone number to verify your key fingerprint. This will involve your reading the key fingerprint back to us in hexidecimal format. 4. We will then use your public key to send mail to you encrypted with your key. This mail will also contain information on obtaining the CERT/CC's public key. 5. You then decrypt the mail, and follow the brief instruction within that mail. If you have any questions or concerns pertaining to this request, please do not hesitate to contact me via the CERT Hotline: 412.268.7090. Thank you in advance for your cooperation. Regards, Katie Steiner CERT Coordination Center | Internet E-mail: cert@cert.org Software Engineering Institute | Telephone: +1-412-268-7090 24-hour hotline Carnegie Mellon University | - phone answered by CERT personnel Pittsburgh PA 15213-3890 | during business days (Monday - Friday), | from 08:00-20:00 EST/EDT (GMT-5/GMT-4); http://www.cert.org/ | on call for emergencies during other hours * CERT is a registered service mark of Carnegie Mellon University. Registered in U.S. Patent and Trademark Office. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQCUAwUBRS1ddZfX55Gg6Ax3AQETXAP1HkCdUGBly6/HCEab3sSU+0mavVVxacYl MqHhTeHkN0MUc0GkITTNSuH9DvysRTAm5QrKj63zFMA2+HVTZBIZtIHGl/3oEWFf uFGJDk2JWZOFyQyTEtKfsbEafbergZm0HV9ETje7mm53rpGw3hFIWbjQYU/6vcvu UF/OON8rgw== =tGuG -----END PGP SIGNATURE-----

« previous php.mirrors (#33037) next »