[cabf_governance] Ballot 206 comments

Gervase Markham gerv at mozilla.org
Thu Nov 2 02:38:13 MST 2017


On 01/11/17 20:29, Dean Coclin wrote:
> Regarding your comment on system security, working groups talk about
> a lot of things, not necessarily directly related to the design of a
> system. Especially with regard to code signing, there is discussion
> on list of threats, potential threats, ways to subvert things, etc.
> Does that really need to be public?

Absolutely. Potential ways to subvert things are among the most
important topics to be discussed in public.

https://en.wikipedia.org/wiki/Security_through_obscurity has more
discussion of this point.

Gerv



More information about the Govreform mailing list