Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
'Responsible Disclosure' Draft Could Have Legal Muscle
Mark Rasch, 2002-03-11

A proposed Internet standard would dictate how researchers report and vendors close security vulnerabilities. Ignoring it could be risky for either side.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Not all RFCs are standards (see RFC 1796) 2002-03-14
Hal
In fact this document CAN NEVER become a standard. It is clearly labeled at the top "Category: Best Current Practice".

Documents that are intended to become standards are labeled "Category: Standards Track".
...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus