[jira] [Commented] (KAFKA-3709) Create project security page

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KAFKA-3709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15295087#comment-15295087 ] 

ASF GitHub Bot commented on KAFKA-3709:
---------------------------------------

Github user junrao commented on the pull request:

    https://github.com/apache/kafka-site/pull/12#issuecomment-220784809
  
    The mailing list has been created. We can invite all committers/contributors who are interested in security to join the list.
    
      security@kafka.apache.org
            Moderators: junrao@gmail.com,ismael@juma.me.uk,cshapi@gmail.com
            This list is private.



> Create project security page
> ----------------------------
>
>                 Key: KAFKA-3709
>                 URL: https://issues.apache.org/jira/browse/KAFKA-3709
>             Project: Kafka
>          Issue Type: Improvement
>          Components: website
>            Reporter: Flavio Junqueira
>            Assignee: Flavio Junqueira
>
> We are creating a security@k.a.o mailing list to receive reports of potential vulnerabilities. Now that Kafka has security in place, the community might starts receiving vulnerability reports and we need to follow the guidelines here:
> http://www.apache.org/security/
> Specifically, security issues are better handled in a project-specific list. This jira is to create a web page that informs users and contributors of how we are supposed to handle security issues. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)