Maybe look at asterisk-announce?<br>Since that list has a pretty low volume.<br><br><br><div><span class="gmail_quote">On 3/14/07, <b class="gmail_sendername">leander</b> <<a href="mailto:l.vanhoesel@gmail.com">l.vanhoesel@gmail.com
</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">On 3/14/07, steve szmidt <<a href="mailto:steve@szmidt.org">steve@szmidt.org
</a>> wrote:<br>> With the low volume here why not just send it to this list?<br><br>It would be difficult to use for any type of monitoring, e.g. when you<br>get an email will it be a discussion with the word vulnerability in
<br>the body, or a report an actual vulnerability was found?<br><br>I think it would be good to have a separate list for disclosure only,<br>and keep this for discussion as the description says.<br><br>Thanks for your consideration.
<br><br><br>--<br>leander - <a href="mailto:l.vanhoesel@gmail.com">l.vanhoesel@gmail.com</a><br>_______________________________________________<br>--Bandwidth and Colocation provided by <a href="http://Easynews.com">Easynews.com
</a> --<br><br>Asterisk-Security mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-security">http://lists.digium.com/mailman/listinfo/asterisk-security
</a><br></blockquote></div><br><br clear="all"><br>-- <br>Clod Patry