Home page logo
/

oss-sec logo oss-sec mailing list archives

Re: Request for linux-distros () vs openwall org membership
From: Tomas Hoger <thoger () redhat com>
Date: Tue, 6 Nov 2012 14:48:20 +0100

On Tue, 06 Nov 2012 05:10:33 -0800 akuster wrote:

An explicit signed ack/nack from the existing Montavista subscriber
sounds reasonable here, at least to confirm Premchand is really a
member of their security team.

What do you mean as signed?

Signed as GPG/PGP signed.  When you were subscribed to the list, you
had provided your GPG key (id).  If you sign your reply with that key,
list administrator can verify that it is really form current list
member, vouching for another person representing the same distro or
organization.

A good example of similar past communication is this thread:
http://thread.gmane.org/gmane.comp.security.oss.general/6835

As you can see there, a request may come from a person that is involved
with a distribution, but is not expected to be a list member as a
security representative of the distribution.

It's really this kind of feedback that can help list administrator
here, and signing makes it verifiable.

-- 
Tomas Hoger / Red Hat Security Response Team


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault