Re: [PATCH SECURITY-POLICY 4/9] Use a public mailing list for predisclosure membership applications.

From: Ian Campbell <Ian.Campbell@citrix.com>
To: Ian Jackson <ijackson@chiark.greenend.org.uk>
Cc: lars.kurth.xen@gmail.com, xen-devel@lists.xenproject.org,
	Ian Jackson <Ian.Jackson@eu.citrix.com>
Subject: Re: [PATCH SECURITY-POLICY 4/9] Use a public mailing list for predisclosure membership applications.
Date: Mon, 19 Jan 2015 12:49:46 +0000	[thread overview]
Message-ID: <1421671786.10440.78.camel@citrix.com> (raw)
In-Reply-To: <1421437941-10997-4-git-send-email-ijackson@chiark.greenend.org.uk>

On Fri, 2015-01-16 at 19:52 +0000, Ian Jackson wrote:
> Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
> Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
> ---
>  security_vulnerability_process.html |    5 +++--
>  1 file changed, 3 insertions(+), 2 deletions(-)
> 
> diff --git a/security_vulnerability_process.html b/security_vulnerability_process.html
> index de5e83e..4fd02e9 100644
> --- a/security_vulnerability_process.html
> +++ b/security_vulnerability_process.html
> @@ -228,8 +228,9 @@ permitted to also make available the allocated CVE number. This is no
>  longer permitted in accordance with MITRE policy.</p>
>  <h3>Predisclosure list membership application process</h3>
>  <p>Organisations who meet the criteria should contact
> -security@xenproject if they wish to receive pre-disclosure of
> -advisories. Please include in the e-mail:</p>
> +predisclosure-applications@xenproject if they wish to receive
                                        ^.org

> +pre-disclosure of advisories.  That is a public mailing list.

s/That/This/? Not sure.

> +<p>Please include in the e-mail:</p>
>  <ul>
>    <li>The name of your organization</li>
>    <li>A brief description of why you fit the criteria, along with