[development] Re: [support] Drupal 4.6.6/4.5.8 security releases

[Derek Wright]

On Tue, 14 Mar 2006 11:11:12 +0100  Gerhard Killesreiter wrote:

> I guess a letter of introduction to the security list would be a good 
> thing to do.

by which you mean sending email to "security at drupal.org"?  based on
reading the docs i could find, it doesn't look like that's a list just
anyone can subscribe to (for good reason).  so, if we want to help, we
just send something there, say who we are, what skills/resources we
have, offer our services, and wait for someone to contact us with
something to do?  just trying to get a better sense of what the
security team has in mind for "outside" help.

guidelines like this would be useful so that folks who want to help
don't generate more work by sending too little or too much info, or
send it to the wrong place.

thanks,
-derek