Need for a computer security contact - php VEND#535318
| From: | CERT Coordination Center | Date: | Wed, 11 Oct 2006 21:09:35 +0000 |
| Subject: | Need for a computer security contact - php VEND#535318 | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-33037@lists.php.net to get a copy of this message | ||
-----BEGIN PGP SIGNED MESSAGE-----
Hello Folks:
The CERT Coordination Center (CERT/CC) is a center of Internet
security expertise, located at the Software Engineering Institute, a
federally funded research and development center. Part of our Charter
is to coordinate the deployment of information relating to internet
security vulnerabilities, and to work with vendors to ensure that
appropriate information is published for users of their products, and,
when possible, to assist in the deployment of patches.
At this time, we are aware of a problem with one of your products. We
are interested in establishing a formal contact with The PHP Group to
facilitate the coordination of vulnerability remediation. Given the
sensitive nature of the information typically exchanged during the
vulnerability remediation process, we are interested in exchanging PGP
or GnuPG keys with The PHP Group to ensure secure communication.
Please follow the steps listed below to begin the key exchange process:
1. You generate a PGP or GnuPG key pair if you do not already have one.
2. You then send the public key to <cert@cert.org> via email signed
with that key. Please include "VEND#535318" in the subject line
of your email message.
3. We will then contact you out-of-band via a trusted telephone number
to verify your key fingerprint. This will involve your reading the
key fingerprint back to us in hexidecimal format.
4. We will then use your public key to send mail to you encrypted with
your key. This mail will also contain information on obtaining the
CERT/CC's public key.
5. You then decrypt the mail, and follow the brief instruction within
that mail.
If you have any questions or concerns pertaining to this request,
please do not hesitate to contact me via the CERT Hotline:
412.268.7090.
Thank you in advance for your cooperation.
Regards,
Katie Steiner
CERT Coordination Center | Internet E-mail: cert@cert.org
Software Engineering Institute | Telephone: +1-412-268-7090 24-hour hotline
Carnegie Mellon University | - phone answered by CERT personnel
Pittsburgh PA 15213-3890 | during business days (Monday - Friday),
| from 08:00-20:00 EST/EDT (GMT-5/GMT-4);
http://www.cert.org/ | on call for emergencies during
other hours
* CERT is a registered service mark of Carnegie Mellon University.
Registered in U.S. Patent and Trademark Office.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQCUAwUBRS1ddZfX55Gg6Ax3AQETXAP1HkCdUGBly6/HCEab3sSU+0mavVVxacYl
MqHhTeHkN0MUc0GkITTNSuH9DvysRTAm5QrKj63zFMA2+HVTZBIZtIHGl/3oEWFf
uFGJDk2JWZOFyQyTEtKfsbEafbergZm0HV9ETje7mm53rpGw3hFIWbjQYU/6vcvu
UF/OON8rgw==
=tGuG
-----END PGP SIGNATURE-----