Stay Ahead With Linux Security News

security advisorysecurity traininginformation sharing

BIND Membership Program Introduced by ISC for Security Professionals

Recently on a posting forwarded to bugtraq by Theo de Raadt, Paul Vixie, Chairman of the ISC, describes the need for a fee-based program to notify BIND vendor's, TLD operators, and others under a non-disclosure plan to publish security and bug information to priority members. Theo thinks this is detrimental to the development of BIND . . .. Recently on a posting forwarded to bugtraq by Theo de Raadt, Paul Vixie, Chairman of the ISC, describes the need for a fee-based program to notify BIND vendor's, TLD operators, and others under a non-disclosure plan to publish security and bug information to priority members. Theo thinks this is detrimental to the development of BIND . "ISC has historically depended upon the "bind-workers" mailing list, and CERT advisories, to notify vendors of potential or actual security flaws in its BIND package. Recent events have very clearly shown that there is a need for a fee-based membership forum consisting only of: ISC itself Vendors who include BIND in their products Root and TLD name server operators Other qualified parties (at ISC's discretion) Requirements of bind-members will be: Not-for-profit members can have their fees waived Use of PGP (or possibly S/MIME) will be mandatory Members will receive information security training Members will sign strong nondisclosure agreements Features and benefits of "bind-members" status will include: Private access to the CVS pool where bind4, bind8 and bind9 live Reception of early warnings of security or other important flaws Periodic in-person meetings, probably at IETF's conference sites Participation on the bind-members mailing list If you are a BIND vendor, root or TLD server operator, or other interested party, I urge you to seek management approval for entry into this forum, and then either contact, or have a responsible party contact, This email address is being protected from spambots. You need JavaScript enabled to view it.. Paul Vixie Chairman ISC" . Monetized program targeting BIND suppliers and TLD administrators aimed at enhancingsecurity knowledge exchange through confidentiality pacts.. BIND Membership,FEE-Based Programs,Vendor Training. . LinuxSecurity.com Team

Feb 01, 2001 • LinuxSecurity.com Team Vendors/Products