From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pj1-x102b.google.com (mail-pj1-x102b.google.com [IPv6:2607:f8b0:4864:20::102b]) by sourceware.org (Postfix) with ESMTPS id EB8DF3858D28; Tue, 11 Apr 2023 16:32:20 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org EB8DF3858D28 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-pj1-x102b.google.com with SMTP id w11so9051046pjh.5; Tue, 11 Apr 2023 09:32:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1681230740; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=+Lqy7B3Wj0RNqKfXf8mDTC9XJWiF94CKvsQ4azlrb2U=; b=oz3xymXhnC8xFi7476/q5AEiK2Zo20b7E17QcS1mEp9hJg8PeKetNHu01Yj6MBv4Yv CwHHU195ZkKUU1M8kOP3L9wm6MfeRQ4oHyqViDDW3laLfwL8BTvSoFGLWCbZGF6/UzW0 mpXb/CvBUiTqrROB+oU9RuGsYhF7WAlEcCSXzvR7hvuReiEce79EXpKnjwPRmgY2ZzbM r2a1JZIO0HQ/vXU7XultYkvyHXMUYYqKo8tXYdl8zsgCHCtWit0asfMdxMHkgtbhqF+3 GzB6hPvJuFKa29Yk7mDd9899R989Vl5FE0XuGERuLYbJ4pJNKgQlOP6G2Sfcs92jMGNl xvcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1681230740; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=+Lqy7B3Wj0RNqKfXf8mDTC9XJWiF94CKvsQ4azlrb2U=; b=L48J3wLmbWQzZXe/pbHOVpT7swnq4b/OxR9uCK2E5kk4HkieiqqjkRgwRSgkMYn2Lk Gjn+E6zDHUPxswZvv2mIf4TLG9dFEsCjsDjP2L1qgaFtKAKhQ23KeN2VwPGGcbaLkoyy WTD1MffhCHdSDej+j8nxzWsOgDjM+8AE+iE26KaQJ7Zmo/FGCxgeCX0EjrT+UyxT/Ltl QEyB1nZYGXsGV5NHwpDjTLC//3b+CEiyXQLlYQDsDLMfH5R47DmOPGsYHcPtHXXLqx7y k6dpbY/5wWjTI0r6NoNkwtp0Z0ibQAf5QMtmDu00uanBecn3a3Ivuvk47GCetInCq5Wj 3NQQ== X-Gm-Message-State: AAQBX9fkes90oxh116wZ9ZmMyHOQpGpqt0awuENT9T5EDGcU1QChIYQC HujzfDNoZ2aTblunrOVnL0rerul+ACzFy8H3SLl9peJh3Zs= X-Google-Smtp-Source: AKy350YWBbh2r2ZscObPnfiRUWRRgKZYSmF/rgfxJiCuf7cz1nLimMqLM2vnDyv81mzdl505+e0jhOfgxzCuipituxc= X-Received: by 2002:a17:902:a511:b0:19f:3cc1:e3cc with SMTP id s17-20020a170902a51100b0019f3cc1e3ccmr1220495plq.3.1681230739777; Tue, 11 Apr 2023 09:32:19 -0700 (PDT) MIME-Version: 1.0 References: <1c38b926-e003-0e21-e7f1-3d5dbec2aabf@redhat.com> <838rf4ou73.fsf@gnu.org> <03bbbbff-5bcc-3fa8-a5e9-9b9cbd541f06@simark.ca> <83cz4aa2h7.fsf@gnu.org> In-Reply-To: From: Matt Rice Date: Tue, 11 Apr 2023 16:32:08 +0000 Message-ID: Subject: Re: RFC: Adding a SECURITY.md document to the Binutils To: Nick Clifton Cc: Eli Zaretskii , Simon Marchi , binutils@sourceware.org, siddhesh@gotplt.org, gdb@sourceware.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=2.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,MEDICAL_SUBJECT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Level: ** X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Tue, Apr 11, 2023 at 4:23=E2=80=AFPM Nick Clifton via Binutils wrote: > > Hi Guys, > > > But I thought Nick said he didn't intend to use any markup? > > That was certainly my intent. Is there anything that we can gain from > using markup for this document ? I think the main reason to avoid renaming it is certain processes expect th= e file to be named Security.md. E.g. when filing a bug report on github repositories will link to it as an alternative channel for opening security issues. given that binutils doesn't use github for bug reports this might be somewhat less persuasive. I'm not sure if forks may use github issue tracker, there are a few other things which look for the file, such as a thing which scores the processes set up for a given repo, and a more visible tab. I tend to think that .md markup is lightweight enough that it is readable without rendering, and don't see much benefit from diverging from this process... > > > if so, we > > are talking plain text anyway, and a .md file name will just mislead. > > Agreed. > > Cheers > Nick >