Re: [Development] proposal: security mailing list

2011-11-16 Thread Thiago Macieira
On Wednesday, 16 de November de 2011 15.45.11, Peter Hartmann wrote: > >> I am not sure what you mean by invite-only. Could you please > >> ellaborate on the precise meaning ? > > > > A member propose to invite a person, and modulo approval of the others > > he/she can join. > > exactly, just lik

Re: [Development] proposal: security mailing list

2011-11-16 Thread Peter Hartmann
On 11/16/2011 03:30 PM, ext Alexis Menard wrote: > On Wed, Nov 16, 2011 at 11:21 AM, Laszlo Papp wrote: >>> We are planning to transfer that list to something @qt-project.org.The >>> plan is to make that list invite-only and the archives private. >> >> I am not sure what you mean by invite-only. C

Re: [Development] proposal: security mailing list

2011-11-16 Thread Alexis Menard
On Wed, Nov 16, 2011 at 11:21 AM, Laszlo Papp wrote: >> We are planning to transfer that list to something @qt-project.org.The >> plan is to make that list invite-only and the archives private. > > I am not sure what you mean by invite-only. Could you please > ellaborate on the precise meaning ?

Re: [Development] proposal: security mailing list

2011-11-16 Thread Laszlo Papp
> We are planning to transfer that list to something @qt-project.org.The > plan is to make that list invite-only and the archives private. I am not sure what you mean by invite-only. Could you please ellaborate on the precise meaning ? In general, I think it would be nice to provide the opportuni

Re: [Development] proposal: security mailing list

2011-11-16 Thread lars.knoll
On 11/16/11 11:32 AM, "Peter Hartmann" wrote: >On 11/15/2011 09:30 PM, ext lars.kn...@nokia.com wrote: >> (...) >> The reason why many other projects have private lists for security >>issues >> is to avoid making zero day exploits widely known. It would most likely >>be >> good to also be able to

Re: [Development] proposal: security mailing list

2011-11-16 Thread Peter Hartmann
On 11/15/2011 09:30 PM, ext lars.kn...@nokia.com wrote: > (...) > The reason why many other projects have private lists for security issues > is to avoid making zero day exploits widely known. It would most likely be > good to also be able to discuss some of these issues in a more closed > mailing

Re: [Development] proposal: security mailing list

2011-11-15 Thread lars.knoll
On 11/15/11 2:33 PM, "ext Richard Moore" wrote: >On Tue, Nov 15, 2011 at 11:30 AM, Peter Hartmann > wrote: >> I would like to propose the introduction of a low-traffic security >> mailing list for posting security patches for Qt. >> Right now we always need to write a blog post entry with an atta

Re: [Development] proposal: security mailing list

2011-11-15 Thread Richard Moore
On Tue, Nov 15, 2011 at 11:30 AM, Peter Hartmann wrote: > I would like to propose the introduction of a low-traffic security > mailing list for posting security patches for Qt. > Right now we always need to write a blog post entry with an attached > diff (see for instance [1]), but since e.g. SSL

[Development] proposal: security mailing list

2011-11-15 Thread Peter Hartmann
Hello, I would like to propose the introduction of a low-traffic security mailing list for posting security patches for Qt. Right now we always need to write a blog post entry with an attached diff (see for instance [1]), but since e.g. SSL certificates get compromised a lot these days, this do