[dovecot] Re: security audit of the code

[seth vidal]

On Mon, 2003-01-13 at 17:12, Timo Sirainen wrote:
> On Mon, 2003-01-13 at 23:30, seth vidal wrote:
> > Timo,
> >  I know that you're taking an effort to make sure that dovecot is
> > written securely, but I was wondering if you've asked any third party to
> > audit the code yet. I don't have the skills necessary to do this but I
> > bet there is someone out there who does and might be willing to do so.
> 
> I don't really know who or where to ask. I'd be interested of getting
> people to audit Dovecot too.
> 


Would it be reasonable to ask on bugtraq?

What about Chris Evans? - he wrote vsftpd and audited a bunch of Red
Hat's releases iirc.  Maybe worth bugging him to see if he'd be willing
to look it over?

-sv

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://dovecot.org/pipermail/dovecot/attachments/20030113/7f22f0f4/attachment-0003.bin>