Re: Candidate numbering scheme

[Aleph One <aleph1@underground.org>]

The only concern I have is that the candiate numbers never make it outside the working group. If a vendor needs a CVE number for an advisory they should get a proper CVE number and not a candidate number, or they should wait. If we are going to add candidate numbers as a reference it should be in the CMX where it wont be available to the public. Of curse this screws the fact we will be using candidate numbers during our discussion and the discussions will be public. -- Aleph One / aleph1@underground.orghttp://underground.org/KeyID 1024/948FD6B5 Fingerprint EE C9 E8 AA CB AF 09 61 8C 39 EA 47 A8 6A B8 01