Re: [Xen-devel] [PATCH SECURITY-POLICY 4/9] Use a public mailing list for predisclosure membership applications.

[Don Koch <dkoch@xxxxxxxxxxx>]

On Mon, 19 Jan 2015 13:19:03 +0000
Ian Campbell <Ian.Campbell@xxxxxxxxxx> wrote:

> On Mon, 2015-01-19 at 13:10 +0000, Ian Jackson wrote:
> > Ian Campbell writes ("Re: [Xen-devel] [PATCH SECURITY-POLICY 4/9] Use a 
> > public mailing list for predisclosure membership applications."):
> > > On Fri, 2015-01-16 at 19:52 +0000, Ian Jackson wrote:
> > > > -security@xenproject if they wish to receive pre-disclosure of
> > > > -advisories. Please include in the e-mail:</p>
> > > > +predisclosure-applications@xenproject if they wish to receive
> > >                                         ^.org
> > 
> > Deliberately omitted to try to help avoid spam.  I could leave it in
> > but bear in mind that that list needs to be open for posting to all
> > (even non-subscribers).
> 
> Perhaps if it were "<a href=mailto:";'d up it would help?

Sounds like a bigger sign post for spammers to me.

> I don't think it will be all that clear to non-involved people reading
> this (especially if they are in a panic) what suffix they need to add.
> 
> Or include "<dot> org", since that seems to be a pretty common syntax.

I'd go with this or something similar.

-d

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel