[Info-vax] VSI's lack (still) of a secure security reporting mechanism, was: Re: VMS and the Internet of Things (IoT)

[clairgrant71 at gmail.com]

On Tuesday, October 4, 2016 at 11:34:27 PM UTC-4, David Froble wrote:
> Simon Clubley wrote:
> > On 2016-10-04, David Froble <davef at tsoft-inc.com> wrote:

We completely understand that VMS is behind the times in many aspects of security. That is why security is emphasized on the Roadmap and was a major focus in the keynote session by our CEO at the Boot Camp. There are no secrets here. We need massive improvements. No one disputes that. We felt we first needed to have a solid plan for a new TCPIP to give us a foundation on which to build. Now that is finally in place we should be able to show increasing progress in the future. Of course, there are also non external access areas that need addressing.

A mechanism, similar to the ones recently cited, for reporting security issues is very high on the to-do list for our website and should be available reasonably soon.