Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
'Responsible Disclosure' Draft Could Have Legal Muscle
Mark Rasch, 2002-03-11

A proposed Internet standard would dictate how researchers report and vendors close security vulnerabilities. Ignoring it could be risky for either side.

Comments Mode:
Not all RFCs are standards (see RFC 1796) 2002-03-13
Dwonis (1 replies)
Not all RFCs are standards (see RFC 1796) 2002-03-14
Hal
In fact this document CAN NEVER become a standard. It is clearly labeled at the top "Category: Best Current Practice".

Documents that are intended to become standards are labeled "Category: Standards Track".


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/66/11019#11019







 

Privacy Statement
Copyright 2009, SecurityFocus