Received: from localhost (maia-5.hub.org [200.46.204.182]) by postgresql.org (Postfix) with ESMTP id EB5E09FB201 for ; Mon, 5 Feb 2007 18:03:36 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.182]) (amavisd-new, port 10024) with ESMTP id 79718-04 for ; Mon, 5 Feb 2007 18:03:30 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from davinci.ethosmedia.com (server227.ethosmedia.com [209.128.84.227]) by postgresql.org (Postfix) with ESMTP id 771149FB2E9 for ; Mon, 5 Feb 2007 18:03:33 -0400 (AST) X-EthosMedia-Virus-Scanned: no infections found Received: from [64.81.245.111] (account josh@agliodbs.com HELO [192.168.1.27]) by davinci.ethosmedia.com (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 11354613; Mon, 05 Feb 2007 14:07:27 -0800 From: Josh Berkus Reply-To: josh@agliodbs.com Organization: Aglio Database Solutions To: pgsql-www@postgresql.org Subject: Re: How to coordinate web team for security releases? Date: Mon, 5 Feb 2007 14:06:28 -0800 User-Agent: KMail/1.8 Cc: Andrew Sullivan References: <200702051128.13819.josh@agliodbs.com> <21359.1170712469@sss.pgh.pa.us> <20070205215633.GA24413@phlogiston.dyndns.org> In-Reply-To: <20070205215633.GA24413@phlogiston.dyndns.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200702051406.28769.josh@agliodbs.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200702/57 X-Sequence-Number: 11462 Andrew, > OTOH, reducing the number of addresses to include in these > co-ordinations (since packagers presumably need to be alerted too) > mightn't be a bad idea. yeah, I'm thinking two (and only two) lists: pgsql-packagers: for actual release building press-contacts: for release FAQ. I know the second adds more people, but I'm realizing that it's important that our Regional Contacts know about the releases before they go out. Otherwise we risk a press person actually calling, say, Nick about a release and having him say "what security issue?" Also, the RCs are a good way to dissemenate important update information to our non-English-language communities. The question is which is more appropriate for the web folks? I'm thinking -packagers, because the web folks need to know when the actual packages will be ready and any delays. -- --Josh Josh Berkus PostgreSQL @ Sun San Francisco