RE: procedure for penalizing or revoking CNA status?

To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Subject: RE: procedure for penalizing or revoking CNA status?
From: "Boyle, Stephen V." <sboyle@mitre.org>
Date: Wed, 2 Sep 2015 13:20:20 +0000
Accept-Language: en-US
Authentication-Results: spf=none (sender IP is 129.83.29.3)smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (messagenot signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=noneheader.from=mitre.org;
CC: "Boyle, Stephen V." <sboyle@mitre.org>
Delivered-To: coley@rcf-smtp.mitre.org
Delivery-Date: Wed Sep 2 09:21:20 2015
In-Reply-To: <alpine.LNX.2.00.1509012325310.15040@forced.attrition.org>
List-Help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-Owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-Subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-Unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <alpine.LNX.2.00.1409252348190.6528@forced.attrition.org> <Pine.LNX.4.64.1410101327160.14743@beijing.mitre.org> <alpine.LNX.2.00.1508282333000.15040@forced.attrition.org> <CY1PR09MB03780DD9AFA89BC8BE180778B56A0@CY1PR09MB0378.namprd09.prod.outlook.com> <55E65926.9000502@cert.org> <CY1PR09MB08730CC1425FF53089C02FAEC7690@CY1PR09MB0873.namprd09.prod.outlook.com> <alpine.LNX.2.00.1509012325310.15040@forced.attrition.org>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
SpamDiagnosticMetadata: NSPM
SpamDiagnosticMetadata: NSPM
SpamDiagnosticOutput: 1:23
SpamDiagnosticOutput: 1:23
Thread-Index: AQHQ4h7vnwvREEB2rkifDCUWc3JcDZ4oQkXQgABA2wCAAAUU8IAAIsEAgACUeDA=
Thread-Topic: procedure for penalizing or revoking CNA status?

> While some may not consider it 'fair', I respectfully but strongly 
> encourage there to be provisions for holding CNAs accountable for past 
> transgressions, when they were specifically warned about them, and it is 
> documented (e.g. my mails to IBM shared with MITRE).

It is fair, and there will be such provisions.

Steve

References:
- RE: procedure for penalizing or revoking CNA status?
  - From: "Christey, Steven M." <coley@mitre.org>
- Re: procedure for penalizing or revoking CNA status?
  - From: Art Manion <amanion@cert.org>
- RE: procedure for penalizing or revoking CNA status?
  - From: "Boyle, Stephen V." <sboyle@mitre.org>
- RE: procedure for penalizing or revoking CNA status?
  - From: jericho <jericho@attrition.org>

Prev by Date: Question about non-board-member posts to the list
Next by Date: RE: Interim position on assigning CVEs for automated testing and other large-scale vulnerability disclosures
Prev by thread: RE: procedure for penalizing or revoking CNA status?
Next by thread: Re: procedure for penalizing or revoking CNA status?
Index(es):
- Date
- Thread