A proposed Internet standard would dictate how researchers report and vendors close security vulnerabilities. Ignoring it could be risky for either side.
Privacy StatementCopyright 2006, SecurityFocus