Re: CVE REJECT noise

[Reed Loden <reed () reedloden com>]

On Wed, Aug 19, 2015 at 3:06 PM, Solar Designer <solar () openwall com> wrote:

> So, once again, can _only_ those people who want to see non-informative
> CVE REJECT postings in here state so, please?  I don't need to hear from
> the 99%+ of people who I am sure don't want to see those postings in
> here.  That's obvious.  I also already know your preference, Kurt.
>
> And let's end this thread soon.  It isn't meant to be long, or that
> would defeat the purpose.  But for now, the thread is open in case
> anyone at all (besides Kurt) has any objections to the proposed decision
> or wants to establish another mechanism for them to receive those
> seemingly useless messages.

It really comes down to whether the (invalid) CVE assignment has been used
in any public capacity at all. If it has, then it's very useful to know
about it, as that has been a source of confusion in the past. If not, then
only MITRE really needs to know so they can update their records.

~reed