Group Proposal, for further discussion: Vulnerability Group

[Martijn Verburg]

Thanks Mark,

Looks good to us (ran it past legal for LJC / Adopt Build Farm).

Cheers,
Martijn

On 6 February 2018 at 06:38, Volker Simonis <volker.simonis at gmail.com>
wrote:

> On Wed, Jan 31, 2018 at 5:44 PM,  <mark.reinhold at oracle.com> wrote:
> > (This is not a call for votes; it is just a call for discussion.)
> >
> > To follow up on my initial call for discussion last August [1], I've
> > posted a revised proposal for the Vulnerability Group together with
> > the final version of the non-disclosure and license agreement, and
> > diffs of the final version with respect to the first version:
> >
> >   http://cr.openjdk.java.net/~mr/ojvg/
> >   http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30.pdf
> >   http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30-diffs.pdf
> >
> > The only change to the proposal itself is to add a link to define the
> > term "rough consensus," as suggested by Volker [2].
> >
>
> Thanks for considering my suggestion. I actually didn't expected that
> the definition of "rough consensus" will be longer than the entire
> "OpenJDK Vulnerability Group" proposal, but rough consensus seems to
> be a complex topic :)
>
> The final agreement is under review. I'll let you know once it's done
> and we can finally sign it.
>
> Regards,
> Volker
>
> > I'll propose to create the Vulnerability Group in one week, after
> > prospective initial Group Members have had time to review the final
> > agreement.
> >
> > - Mark
> >
> >
> > [1] http://mail.openjdk.java.net/pipermail/discuss/2017-August/
> 004267.html
> > [2] http://mail.openjdk.java.net/pipermail/discuss/2017-
> October/004509.html
>