On Tue, Jul 19, 2011 at 12:06:15AM +0200, Stefan Behte wrote:
Then posting it to the new vendor-sec (linux-distros () vs openwall org)
sounds like the right thing to do.
This is not exactly the new vendor-sec. As the name suggests, it is a
Linux distros only list. Also, please note that the maximum acceptable
embargo period on this list is 14 days. We need to communicate this
detail to whoever we're asking to disclose anything to the list, before
they disclose. When posting to the list, you may encrypt messages to
the attached key.