From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by sourceware.org (Postfix) with ESMTPS id 7CEF93858413 for ; Wed, 6 Sep 2023 16:33:05 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 7CEF93858413 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1694017985; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=J+A3vCJLX3bnp7HbaNL1q+fMk+bbdIabX4Zh/CY0FiY=; b=WcHArYLa6css1NO+eHTcpYrSdBGeLYLkPzfxQ9uGuL72g1KgJaD9i7eFQ7tXlFZvytChor KfOCQQhOa0OZHRaObDfHgnxuWVUQaPPKjVH62OZqATFAotuGtq1bOM+wggspFek2KMPGuZ vybG9LfHF7V/nbxMmn5Tq/IjpodcAdc= Received: from mimecast-mx02.redhat.com (mx-ext.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-396-ezvhaKL3Od-QP2vPDgSWnQ-1; Wed, 06 Sep 2023 12:33:03 -0400 X-MC-Unique: ezvhaKL3Od-QP2vPDgSWnQ-1 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.rdu2.redhat.com [10.11.54.1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 5EAF91C297A0; Wed, 6 Sep 2023 16:33:03 +0000 (UTC) Received: from oldenburg3.str.redhat.com (unknown [10.39.195.19]) by smtp.corp.redhat.com (Postfix) with ESMTPS id E0ABD40C2070; Wed, 6 Sep 2023 16:33:02 +0000 (UTC) From: Florian Weimer To: Paul Eggert Cc: libc-alpha@sourceware.org Subject: Re: GNU C Library as its own CNA? References: <1f5a1295-36d1-ab5e-86ec-1e91acefc63f@gotplt.org> <6ad61af4-8890-809c-d168-5a6e8c750d26@cs.ucla.edu> <8734zrzdjz.fsf@oldenburg3.str.redhat.com> <63d0c6d3-4e7c-6e04-b9a5-fe28b39d16bc@cs.ucla.edu> Date: Wed, 06 Sep 2023 18:33:00 +0200 In-Reply-To: <63d0c6d3-4e7c-6e04-b9a5-fe28b39d16bc@cs.ucla.edu> (Paul Eggert's message of "Wed, 6 Sep 2023 09:00:04 -0700") Message-ID: <87ledjxnwj.fsf@oldenburg3.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.1 on 10.11.54.1 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-Spam-Status: No, score=-4.8 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: * Paul Eggert: > On 2023-09-06 05:33, Florian Weimer wrote: >> That's not the documented purpose of: > > Good point; we'd need to change that mailing list's purpose. There > would be pros and cons for that, the pros being mostly for people > sending in bug reports (because to them it's simpler to have one > security contact point for all GNU projects) and the cons being mostly > for us. But the people behind would need some way to contact glibc developers in private. At that point, we can just that means of contact to the general public, no? Thanks, Florian