, 2002-03-11
A proposed Internet standard would dictate how researchers report and vendors close security vulnerabilities. Ignoring it could be risky for either side.
Expand all |
Post comment
|
'Responsible Disclosure' Draft Could Have Legal Muscle
, 2002-03-11 A proposed Internet standard would dictate how researchers report and vendors close security vulnerabilities. Ignoring it could be risky for either side.
Expand all |
Post comment
|
|
|
Privacy Statement |
Internet standards are named STD, not RFC.
RFC is "Request for comments" and nothing more, unless widely accepted/recognized as standard. Publishing a RFC won't make it standard by itself.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/66/10951#10951