Re: [Xen-devel] [PATCH SECURITY-POLICY 4/9] Use a public mailing list for predisclosure membership applications.

[Ian Campbell <Ian.Campbell@xxxxxxxxxx>]

On Mon, 2015-01-19 at 13:10 +0000, Ian Jackson wrote:
> Ian Campbell writes ("Re: [Xen-devel] [PATCH SECURITY-POLICY 4/9] Use a 
> public mailing list for predisclosure membership applications."):
> > On Fri, 2015-01-16 at 19:52 +0000, Ian Jackson wrote:
> > > -security@xenproject if they wish to receive pre-disclosure of
> > > -advisories. Please include in the e-mail:</p>
> > > +predisclosure-applications@xenproject if they wish to receive
> >                                         ^.org
> 
> Deliberately omitted to try to help avoid spam.  I could leave it in
> but bear in mind that that list needs to be open for posting to all
> (even non-subscribers).

Perhaps if it were "<a href=mailto:";'d up it would help?

I don't think it will be all that clear to non-involved people reading
this (especially if they are in a panic) what suffix they need to add.

Or include "<dot> org", since that seems to be a pretty common syntax.

> > > +pre-disclosure of advisories.  That is a public mailing list.
> > 
> > s/That/This/? Not sure.
> 
> I thought `that' because the message itself (and the policy) isn't on
> a mailing list.

It sounds weird to me (not to say it's wrong of course...).

Perhaps:

...@xenproject, which is a public mailing list, if they wish ...

or, "Note that this is a public mailing list"?

Ian.


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel