education suggestion

[Kurt Seifried <kseifried@redhat.com>]

So it would appear many people are losing their mind on oss-security, which is not surprising as we haven't really educated people about what's up. 

I would suggest we come up with a quick one page education document that covers the new way forwards and why it's better/more sustainable, major points to include:

1) moving forwards it's all about structured data and automation, random email requests is not sustainable

2) MITRE has minted many more CNAs (and continues to do so) so there won't need to be as many requests to MITRE

3) the DWF is in the process of doing the CVE Mentor and multiple CNA roll out, which will be way more efficient/easier then everyone in the OpenSource community having to poke MITRE constantly

 

--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com