Group Proposal, for further discussion: Vulnerability Group

[mark.reinhold at oracle.com]

(This is not a call for votes; it is just a call for discussion.)

To follow up on my initial call for discussion last August [1], I've
posted a revised proposal for the Vulnerability Group together with
the final version of the non-disclosure and license agreement, and
diffs of the final version with respect to the first version:

  http://cr.openjdk.java.net/~mr/ojvg/
  http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30.pdf
  http://cr.openjdk.java.net/~mr/ojvg/ojvg-ndla-2018-01-30-diffs.pdf

The only change to the proposal itself is to add a link to define the
term "rough consensus," as suggested by Volker [2].

I'll propose to create the Vulnerability Group in one week, after
prospective initial Group Members have had time to review the final
agreement.

- Mark


[1] http://mail.openjdk.java.net/pipermail/discuss/2017-August/004267.html
[2] http://mail.openjdk.java.net/pipermail/discuss/2017-October/004509.html