request unarchived private geoserver-security mailing list

[jive]

GeoServer is having a few challenges with our responsible disclosure policy, and would like to set up a private list, unarchived, to use for members of the public to contact.

Initial members of the list are the geoserver PSC, we may add further individuals over time:

• Andrea Aime <andrea.aime at geo-solutions.it>
• Jody Garnett <jody.garnett at gmail.com>
• Ben Caradoc-Davies <ben at transient.nz>
• Ian Turton <ijturton at gmail.com>
• Alessio Fabiani <alessio.fabiani at geo-solutions.it>
• Brad Hards <bradh at frogmouth.net>
• "Rahkonen Jukka (MML)" <jukka.rahkonen at maanmittauslaitos.fi>
• Kevin Smith <smithkm at draconic.ca>
• Simone Giannecchini <simone.giannecchini at geo-solutions.it>

[jsanz]

Hi this is kind of a special mailing list request, since we normally solve this as a distribution list using aliases. Anyway I think I have set up something that should work.

I've created the mailing list "geoserver-security@…"[1] with the following settings:

• The list does not have any archive
• I subscribed the PSC members directly (I forgot to add a note pointing to this ticket, I'll write them separately now)
• I've added them also as moderators
• The list does not accept new members without approval
• The list puts on hold any message from a non-member, so moderators and admins will receive an e-mail to visit the moderation queue and decide what to do with the message. This is better than accepting non-member messages to avoid spammers.

Pending topics:

• Who will be the admin?
• Sending admin and moderation passwords to the members, I'm waiting for the administrator appointed to do this.

Questions or comments?

[1] ​https://lists.osgeo.org/mailman/listinfo/geoserver-security

[Aaime]

Andrea Aime and Jody Garnett volunteered to be admins.

[jsanz]

Done, I'll send both groups separately their corresponding passwords. Please reopen this ticket or ping me directly if you need further assistance.