Subject: Re: NetBSD Security Advisory 2002-009: Multiple vulnerabilities in OpenSSL code
To: Ignatios Souvatzis <is@netbsd.org>
From: David Maxwell <david@vex.net>
List: current-users
Date: 08/02/2002 18:30:29
On Fri, Aug 02, 2002 at 10:11:12PM +0200, Ignatios Souvatzis wrote:
> On Fri, Aug 02, 2002 at 03:08:16PM -0400, David Maxwell wrote:
> > On Fri, Aug 02, 2002 at 05:07:53PM +0200, Olaf Seibert wrote:
> > > On Fri 02 Aug 2002 at 09:57:28 -0400, NetBSD Security Officer wrote:
> > > | [-- PGP output follows (current time: Fri Aug  2 17:04:41 2002) --]
> > > | gpg: Warning: using insecure memory!
> > > | gpg: Signature made Thu Aug  1 15:37:30 2002 CEST using RSA key ID F8376205
> > > | gpg: BAD signature from "security-officer@netbsd.org"
> > >        ^^^
> 
> I'd auto-check them if they had proper PGP/MIME headers...

I honestly don't know if I've ever discussed that with the other S-Os.

As far as I can remember, no advisory to date has been issued in a MIME
format. I will check and see if there's a reason for that.

My only guess is that it might have had to do with the general use of
MIME compatible MUAs growing over time, since the NetBSD S-O role began.

-- 
David Maxwell, david@vex.net|david@maxwell.net -->
Any sufficiently advanced Common Sense will seem like magic... 
					      - me