Re: [Predisclosure-applications] Fwd: Requesting access for CloudPassage Inc

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

Hi Peter,

Thank you for your application.

Please can you clarify under which classification you are applying, from
the list in the policy[0]:

 * Public hosting providers;
 * Large-scale organisational users of Xen;
 * Vendors of Xen-based systems;
 * Distributors of operating systems with Xen support.

Depending on which of those you think apply to you will determine which
other pieces of information we are then required to consider.

Based on the information you provided it is missing at least:

 * Link(s) to current public web pages, belonging to your organisation, for
   each of following pieces of information:
    * ...
    * Statements about, or descriptions of, your eligible production
      services or released software, from which it is immediately evident
      that they use Xen.
    * ...
    * Information about your handling of security problems:
       * Your invitation to members of the public, who discover security
         problems with your products/services, to report them in confidence
         to you;
       * Specifically, the contact information (email addresses or other
         contact instructions) which such a member of the public should
         use.

Depending on which classification you are applying under there may be other
things, so please pay close attention to the list in the policy as we have
no discretion to accept applications which do not provide all of the above.

It would be useful to us when evaluating the application if you could tie
each of your responses to the specific requirement which it is addressing.

Thanks,
Ian.

[0] http://www.xenproject.org/security-policy.html

_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications