Post

This may actually be a good model to follow instead. Being reliant on a single source has its obvious risks. This is somewhat similar to Let’s Encrypt in some sense, and look at how that turned out and the change it is having. Perhaps this is a better path forward?

Daniel Cuthbert@dcuthbert.bsky.social

Positive www.thecvefoundation.org Without the CVE process, we don't have any real way, besides legislation (which I'm arguing will help too) to keep vendors honest and hold them to account. Here's hoping good comes out of recent events

0 reposts2 likes

No replies yet.