<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;">"Lime, Steve D (MNIT)" <<a href="mailto:Steve.Lime@state.mn.us">Steve.Lime@state.mn.us</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>Re: [mapserver-dev] "Security/Vulnerability (Private)" tickets are not private</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">November 12, 2013 4:05:06 PM EST<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;">Sebastiaan Couwenberg <<a href="mailto:sebastic@xs4all.nl">sebastic@xs4all.nl</a>>, MapServer Dev Mailing List <<a href="mailto:mapserver-dev@lists.osgeo.org">mapserver-dev@lists.osgeo.org</a>><br></span></div><br><div>Interesting idea. Wonder if OSGeo would host it? Anyone know what other projects are doing in this regard?<br><br>-----Original Message-----<br>From: <a href="mailto:mapserver-dev-bounces@lists.osgeo.org">mapserver-dev-bounces@lists.osgeo.org</a> [mailto:mapserver-<a href="mailto:dev-bounces@lists.osgeo.org">dev-bounces@lists.osgeo.org</a>] On Behalf Of Sebastiaan Couwenberg<br>Sent: Tuesday, November 12, 2013 2:46 PM<br>To: MapServer Dev Mailing List<br>Subject: Re: [mapserver-dev] "Security/Vulnerability (Private)" tickets are not private<br><br>On 11/12/2013 09:03 PM, thomas bonfort wrote:<br><blockquote type="cite">I'm open as to how we should treat those: a private psc/security <br>mailing list, a shared googledoc, others?<br></blockquote><br>RTIR may be an option. It's the RT ticketing system customized for security response teams. It can be used to track security issues reported to <a href="mailto:security@mapserver.org">security@mapserver.org</a>, and the communication with the various distribution security teams.<br><br><a href="http://www.bestpractical.com/rtir/">http://www.bestpractical.com/rtir/</a><br><br>Kind Regads,<br><br>Bas<br><br>--<br>GnuPG: 0xE88D4AF1 (new) / 0x77A975AD (old) _______________________________________________<br>mapserver-dev mailing list<br>mapserver-dev@lists.osgeo.org<br>http://lists.osgeo.org/mailman/listinfo/mapserver-dev<br><br><br>_______________________________________________<br>mapserver-dev mailing list<br>mapserver-dev@lists.osgeo.org<br>http://lists.osgeo.org/mailman/listinfo/mapserver-dev<br></div></blockquote></div><br></body></html>