Shibboleth Developers

["Scott Cantor" <>]

> Sorry to bother you about something which is a relatively minor issue
> when you're going to be busy with fixing this, but I noticed that this
> advisory didn't get cc'd to the announce list.

I've done past ones to those two lists, and I'm not sure that I have
permission to post to shibboleth-announce, but somebody that does can
forward it there and we'll clear that up in the future.

> pick things like this up (shib-dev obviously not appropriate, shib-users
> too busy with irrelevant stuff once the IdP is up and running smoothly).
> Is it generally intended to be the case that security patches will be
> announced there, or should I get them to check the website regularly?

I would assume we'd want to use shib-announce as well as shib-users,
probably.

-- Scott