RE: Birds of Feather Meeting - Follow Up

[Russ <Russ.Cooper@rc.on.ca>]

>1) Several people suggested that they would NOT be able My suggestion would be to avoid making any attempt at stating "completeness" by any "release date". The mechanisms you've proposed are that potential CVE candidates would be discussed in a forum, and then, if acceptable, added to the CVE. Let's just take that approach with the items currently in your CVE. Depreciate them to candidates and put them out to the list one at a time. It gives us a basis upon which to test the mechanisms for review. You might want to meter them, that is, release 1 per hour for 8 hours a day, or some such thing to avoid overflow. I can't remember how many entries you currently have in there, but it may be that we might get through them all before your June 2nd deadline. Give each one, say, 2 weeks of forum time and then declare it unless discussion is fervent about it. The deadline should be "when its agreed by the forum or arbitrarily declared by Mitre". Cheers, Russ - NTBugtraq Editor