[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20121106144820.1d6ed02c@redhat.com>
Date: Tue, 6 Nov 2012 14:48:20 +0100
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: Request for linux-distros@...openwall.org
membership
On Tue, 06 Nov 2012 05:10:33 -0800 akuster wrote:
> > An explicit signed ack/nack from the existing Montavista subscriber
> > sounds reasonable here, at least to confirm Premchand is really a
> > member of their security team.
>
> What do you mean as signed?
Signed as GPG/PGP signed. When you were subscribed to the list, you
had provided your GPG key (id). If you sign your reply with that key,
list administrator can verify that it is really form current list
member, vouching for another person representing the same distro or
organization.
A good example of similar past communication is this thread:
http://thread.gmane.org/gmane.comp.security.oss.general/6835
As you can see there, a request may come from a person that is involved
with a distribution, but is not expected to be a list member as a
security representative of the distribution.
It's really this kind of feedback that can help list administrator
here, and signing makes it verifiable.
--
Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
