Group Proposal, for further discussion: Vulnerability Group

[Volker Simonis]

On Wed, Jan 31, 2018 at 5:44 PM,  <mark.reinhold at oracle.com> wrote:
> (This is not a call for votes; it is just a call for discussion.)
>
> To follow up on my initial call for discussion last August [1], I've
> posted a revised proposal for the Vulnerability Group together with
> the final version of the non-disclosure and license agreement, and
> diffs of the final version with respect to the first version:
>
>   http://cr.openjdk.java.net/~mr/ojvg/
>   http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30.pdf
>   http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30-diffs.pdf
>
> The only change to the proposal itself is to add a link to define the
> term "rough consensus," as suggested by Volker [2].
>

Thanks for considering my suggestion. I actually didn't expected that
the definition of "rough consensus" will be longer than the entire
"OpenJDK Vulnerability Group" proposal, but rough consensus seems to
be a complex topic :)

The final agreement is under review. I'll let you know once it's done
and we can finally sign it.

Regards,
Volker

> I'll propose to create the Vulnerability Group in one week, after
> prospective initial Group Members have had time to review the final
> agreement.
>
> - Mark
>
>
> [1] http://mail.openjdk.java.net/pipermail/discuss/2017-August/004267.html
> [2] http://mail.openjdk.java.net/pipermail/discuss/2017-October/004509.html