Re: Juniper to be added to the official list of CNAs

[jericho <jericho@attrition.org>]

On Tue, 19 Apr 2016, Kurt Seifried wrote:

: On a related note what docs/process is being provided to 
Juniper/being 
: used by Juniper for CVE related work? I'm also thinking we should 
maybe 
: send a copy to all the other existing CNA's as well (e.g. Red Hat, 
I'd 
: love to know officially what we're supposed to be doing).

I asked for this and recommended the same thing in 2015 on the board 
list 
and in private. MITRE acknowledged my requests as I recall, but the 
promised CNA documentation has not been provided some seven months 
later, 
despite being reminded and asking about the status.

Brian

p.s. I am moving this to the public list in the interest of 
transparency.