Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 6 Nov 2012 14:48:20 +0100
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: Request for linux-distros@...openwall.org
 membership

On Tue, 06 Nov 2012 05:10:33 -0800 akuster wrote:

> > An explicit signed ack/nack from the existing Montavista subscriber
> > sounds reasonable here, at least to confirm Premchand is really a
> > member of their security team.
> 
> What do you mean as signed?

Signed as GPG/PGP signed.  When you were subscribed to the list, you
had provided your GPG key (id).  If you sign your reply with that key,
list administrator can verify that it is really form current list
member, vouching for another person representing the same distro or
organization.

A good example of similar past communication is this thread:
http://thread.gmane.org/gmane.comp.security.oss.general/6835

As you can see there, a request may come from a person that is involved
with a distribution, but is not expected to be a list member as a
security representative of the distribution.

It's really this kind of feedback that can help list administrator
here, and signing makes it verifiable.

-- 
Tomas Hoger / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.