On Apr 2, 2013, at 8:14 PM, Jonathan S. Katz wrote:
On Apr 2, 2013, at 8:03 PM, Selena Deckelmann wrote:
The Django security release guide is good - I think we could almost copy & paste it. I could throw something up on our wiki where we can fill in the blanks on what we want the actually policy to be and allow people to comment + add modifications.
Here is a wiki I through together combining elements of both our current security page and thoughts from the Django one:
I separated between our current policy and the draft. The draft really needs some blanks to be filled in.
One suggestion (not in the draft) is that when we do make release announcements containing security fixes, we do include the URL to our security policy to make it clear what it is.