Re: [Predisclosure-applications] Application for predisclosure list membership for M.D.G. IT

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

Peter Denison writes ("[Predisclosure-applications] Application for 
predisclosure list membership for M.D.G. IT"):
> I am writing to apply for membership of the predisclosure list for M.D.G. IT
> PTY LTD, an Australian VPS hosting provider, of which I am the director. 

Hi.  Thanks for your application.

We are sorry to say that your application did not contain all the
required information.  We are not permitted to waive the requirements
of the the Xen Project Security Policy, which is defined by the Xen
Project community as a whole.

> We are a public hosting provider, offering Xen based VPS services to
> Australian ecommerce stores. We offer Xen services at
> www.mdg-it.com.au. All of our VPS offerings are currently Xen
> based. A link to our public web pages with rates appears below:
> https://www.mdg-it.com.au/vps-magento-hosting.php

We looked at that web page, but it does not mention Xen as far as we
can see.  The policy requires information ...

   ... from which it is immediately evident that [the eligible
   services] use Xen.

Also, the policy requires:

  * Your invitation to members of the public, who discover security
    problems with your products/services, to report them in confidence
    to you;

  * Specifically, the contact information (email addresses or
    other contact instructions) which such a member of the public
    should use.

We did not see that invitation on the nominated web page.

Please let us know if there is some other web page(s) we should be
looking at for this information, or if we seem to have made a mistake,
or if you have updated the page(s) and would like us to reconsider
your application.

Regards,
Ian.
(on behalf of the Xen Project Security Team.)

_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications