Re: Need for a computer security contact - php VEND#535318

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Please contact security@php.net Edin CERT Coordination Center wrote: > > Hello Folks: > > The CERT Coordination Center (CERT/CC) is a center of Internet > security expertise, located at the Software Engineering Institute, a > federally funded research and development center. Part of our Charter > is to coordinate the deployment of information relating to internet > security vulnerabilities, and to work with vendors to ensure that > appropriate information is published for users of their products, and, > when possible, to assist in the deployment of patches. > > At this time, we are aware of a problem with one of your products. We > are interested in establishing a formal contact with The PHP Group to > facilitate the coordination of vulnerability remediation. Given the > sensitive nature of the information typically exchanged during the > vulnerability remediation process, we are interested in exchanging PGP > or GnuPG keys with The PHP Group to ensure secure communication. > > Please follow the steps listed below to begin the key exchange process: > > 1. You generate a PGP or GnuPG key pair if you do not already have one. > > 2. You then send the public key to <cert@cert.org> via email signed > with that key. Please include "VEND#535318" in the subject line > of your email message. > > 3. We will then contact you out-of-band via a trusted telephone number > to verify your key fingerprint. This will involve your reading the > key fingerprint back to us in hexidecimal format. > > 4. We will then use your public key to send mail to you encrypted with > your key. This mail will also contain information on obtaining the > CERT/CC's public key. > > 5. You then decrypt the mail, and follow the brief instruction within > that mail. > > > If you have any questions or concerns pertaining to this request, > please do not hesitate to contact me via the CERT Hotline: > 412.268.7090. > > Thank you in advance for your cooperation. > > Regards, > > Katie Steiner > > CERT Coordination Center | Internet E-mail: cert@cert.org > Software Engineering Institute | Telephone: +1-412-268-7090 24-hour hotline > Carnegie Mellon University | - phone answered by CERT personnel > Pittsburgh PA 15213-3890 | during business days (Monday - Friday), > | from 08:00-20:00 EST/EDT (GMT-5/GMT-4); > http://www.cert.org/ | on call for emergencies > during other hours > > * CERT is a registered service mark of Carnegie Mellon University. > Registered in U.S. Patent and Trademark Office. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.1 (Cygwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFL/Z9oL7jghV9D6gRAn4bAKDXUqnj5xvPv+YY924OUQxtmfWjhACeLtpW W8nTkrb/KmJ/pDR0oMu2nYc= =7RD4 -----END PGP SIGNATURE-----