Received: from localhost (maia-2.hub.org [200.46.204.187]) by postgresql.org (Postfix) with ESMTP id E0B2F9FA2A1 for ; Mon, 5 Feb 2007 17:53:13 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.187]) (amavisd-new, port 10024) with ESMTP id 28522-06 for ; Mon, 5 Feb 2007 17:53:07 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from lists.commandprompt.com (host-254.commandprompt.net [207.173.203.254]) by postgresql.org (Postfix) with ESMTP id 92CEF9FA0EC for ; Mon, 5 Feb 2007 17:53:10 -0400 (AST) Received: from [192.168.2.3] (evim.gunduz.org [81.214.129.77]) (authenticated bits=0) by lists.commandprompt.com (8.13.7/8.13.6) with ESMTP id l15LrBEk022248 for ; Mon, 5 Feb 2007 13:53:12 -0800 Subject: Re: How to coordinate web team for security releases? From: Devrim GUNDUZ To: "pgsql-www@postgresql.org" In-Reply-To: <45C78B00.4020203@hagander.net> References: <200702051128.13819.josh@agliodbs.com> <45C78B00.4020203@hagander.net> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-gGfqLXplpqjjzaumAHAo" Organization: Command Prompt, Inc. Date: Mon, 05 Feb 2007 23:53:35 +0200 Message-Id: <1170712415.3056.25.camel@laptop.gunduz.org> Mime-Version: 1.0 X-Mailer: Evolution 2.8.2.1 (2.8.2.1-3.fc6) X-Virus-Scanned: ClamAV version 0.88.5, clamav-milter version 0.88.5 on projects.commandprompt.com X-Virus-Status: Clean X-Greylist: Sender succeded SMTP AUTH authentication, not delayed by milter-greylist-1.6 (lists.commandprompt.com [192.168.2.159]); Mon, 05 Feb 2007 13:53:13 -0800 (PST) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200702/51 X-Sequence-Number: 11456 --=-gGfqLXplpqjjzaumAHAo Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello, On Mon, 2007-02-05 at 20:52 +0100, Magnus Hagander wrote: > > What I need is a non-public list for this, so that I can ask for web > > site changes 3-4 days ahead without it becoming a news item. >=20 > Will that really help? In this case, the files were uploaded to the > ftp site long before you made your post to the -www list... Does it > really make a difference?=20 Here is what I have been thinking about this for a while: * As now, an announce to -packagers about the new release. * Upload the new tarballs to a private area (instead of public FTP site) so that only packagers and other related people can download them to build the packages, etc. * Win32 binaries, source tarballs and RPMs will be uploaded to another directory (not to FTP site in developer.postgresql.org) before the release. * After we are done with all of them, (that takes 2 days only), we'll move this directory to FTP site and wait for propagation. Does it look good? --=20 Devrim G=C3=9CND=C3=9CZ PostgreSQL Replication, Consulting, Custom Development, 24x7 support Managed Services, Shared and Dedicated Hosting Co-Authors: plPHP, ODBCng - http://www.commandprompt.com/ --=-gGfqLXplpqjjzaumAHAo Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBFx6dfpme12CBXnxERAko0AJ4l5OJjdzddcUnT+qDkXzk0ZMvoYACfbTNo qrSn5LWf2AdFLwlpvxXjnC8= =A1Wy -----END PGP SIGNATURE----- --=-gGfqLXplpqjjzaumAHAo--