Re: Candidate numbering scheme

[Aleph One <aleph1@underground.org>]

The only concern I have is that the candiate numbers never make it
outside the working group. If a vendor needs a CVE number for an advisory
they should get a proper CVE number and not a candidate number, or they
should wait. If we are going to add candidate numbers as a reference it
should be in the CMX where it wont be available to the public. Of curse
this screws the fact we will be using candidate numbers during our
discussion and the discussions will be public.

-- 
Aleph One / aleph1@underground.org
http://underground.org/
KeyID 1024/948FD6B5 
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01