Tillbaka

on hacker news: https://news.ycombinator.com/item?id=42802736

@bagder
Should we participate in CVE production at all?

@levitte then we just leave it to someone else to do it and I think that is even worse...

@bagder
Uhmmmm... so, make yourself a CVE authority on your stuff [effectively blocking anyone else from publishing anything on your stuff), and do nothing else (i.e. no CVE published).

Of course, it's a bit late for #curl, but you know, other projects?

(and yes, it's naughty. I'm in a naughty mood, yeah?)

@levitte there's an appeal process to prevent that kind of action from CNAs