Create OpenJS CNA Mailing List

[ruddermann]

On the OpenJS CNA Application we need to provide two separate email addresses with mailing lists. The recommendation for these to are:

• Public Point of Contact: [email protected]
• CNA Mailing List Contact: [email protected]

[bensternthal]

@ruddermann Should these lists be private?

[bensternthal]

@ruddermann ping

[ljharb]

@bensternthal like, should membership be private? or emails sent to the list?

[bensternthal]

@ljharb

• Public = anyone can view messages on the web
• Private = limited to those subscribed to the list

We can also control posting permissions, those options are:

• Moderated Discussions: New members cannot post to the list without their emails being approved by a moderator. For new lists, this uses a Groups.io setting that will only moderate users for their first 3 posts.
• Open Discussion: New members can immediately post to the list.
• Announcement: Only moderators can post to the list

[ljharb]

I would assume, then, that it must be private, since security reports may come in via that mechanism. For posting permissions, probably open discussion until there's an issue, at which point we'd lock it down to moderated?

[bensternthal]

@ruddermann please advise so we can create this.

[ruddermann]

Hey @bensternthal - @ljharb is correct:

• Private
• Open Discussion

[bensternthal]

[email protected]

• CNA Mailing list created at [email protected]
• Private list with open discussion (anyone can post, viewing is private)
• Added Rudd, Jordan, Ben, Robin to list, happy to add others

[email protected]*

• Security mailing list created at [email protected]
• Private list with open discussion (anyone can post, viewing is private)
• Added Rudd, Jordan, Ben, Robin to list, happy to add others

Note we may want to create a "security committee" and those would be the folks who would be on both lists.

@ruddermann Please verify permissions (including doing a test) to ensure this is what you want.

[UlisesGascon]

Added Rudd, Jordan, Ben, Robin to list, happy to add others

I guest that @ctcpip and I can be added based on #230 (comment)

[bensternthal]

Done.