Re: [xwiki-devs] [Proposal] A private security mailing list

Hello devs, I propose to introduce a security mailing list (security(a)xwiki.org) to discuss details of security issues. This list should be private, with only committers and trusted contributors having read and write access. Anyone who proved his good intentions on the dev-list and bug tracker should be able to get access to security-list through the usual vote procedure. The purpose of this list is to give a safe place to discuss details open security issues without giving all script kiddies in the world examples to write exploits. The discussions should be kept on this private list until the corresponding fix is released. WDYT?