On 16/1/09 17:33, Paul Hoffman wrote:
At 6:05 AM +0000 1/16/09, Gervase Markham wrote:
Nelson B Bolyard wrote:
3. I wonder if the non-developer topics are already within the scope of
another extant low-traffic list, namely dev-security (a.k.a.
mozilla.dev.security), except that I think the new list does not belong
in the "dev" hierarchy.
In an ideal world, it wouldn't, but it does seem to me that the upside
of a somewhat more accurate list name has to balance against the
downside of creating Yet Another List.
If we were to create another one, it would be only to solve this
problem, which would mean we'd need a new hierarchy - e.g.
mozilla.policy. But security and crypto are really the only areas of
Mozilla policy which have anything like as much debate as this. So it
would be a fairly empty hierarchy.
So, I'm currently minded to just take steps to move all these
discussions to mozilla.dev.security. But I'm happy to hear objections.
I'm happy to hear that you're happy to hear. :-) Objection.
Security has two very distinct aspects, policy and technology, that have less
overlap than is commonly thought. People mash them together because they are so
happy to think that someone wants to hear their security concern that they'll
just say what they think wherever they can. The very significant downside of
this mixing is that security technology moves forward much slower than it
should.
Security implementers rarely want to talk about policy after a month or two.
People who are concerned with security policy can go on for years (well,
decades for some of us).
Having a separate policy list would help the technology folks focus on what they do best.
It would also help keep the policy people keep their discussion out of bits-on-the-wire
and up in the "what should we be doing" layer.
I agree with Paul. The separation of policy from technology is also a
question of professionalism and responsibility.
iang
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
