[Esapi-user] .NET and Java WAF

Jim Manico jim.manico at owasp.org
Tue Jul 26 20:25:14 EDT 2011


I totally support splitting the ESAPI WAF into a brand new project. Go
for it - and great work!

- Jim Manico

On Jul 26, 2011, at 7:23 PM, Christian Heinrich
<christian.heinrich at owasp.org> wrote:

> GPC,
>
> Please consider this notice that "we" intend to escalate for
> recognition as an OWASP Project by the GPC shortly after BlackHat and
> DefCon.
>
> Hence I have CC ESAPI Mailing List for discussion in the interim until
> the @owasp.org Mailing Lists are created.
>
> Juan, Ryan, Jason and Jason have been BCC.
>
> ---------- Forwarded message ----------
> From: Christian Heinrich <christian.heinrich at owasp.org>
> Date: Tue, Jul 26, 2011 at 8:33 AM
> Subject: Re: [Esapi-user] WAF 2.0? alpha on repository
> To: "Calderon, Juan Carlos (GE, Corporate, consultant)" <juan.calderon at ge.com>
> Cc: Jim Manico <jim.manico at owasp.org>, Ryan Barnett <ryan.barnett at owasp.org>
>
>
> Juan,
>
> On Tue, Jul 26, 2011 at 6:02 AM, Calderon, Juan Carlos (GE, Corporate,
> consultant) <juan.calderon at ge.com> wrote:
>> What do you mean closing this off? Having it ready or defining is an
>> OWASP project?
>
> I was referring too having it listed as an OWASP Project, such as an
> associated mailing list, etc.
>
> On Tue, Jul 26, 2011 at 6:02 AM, Calderon, Juan Carlos (GE, Corporate,
> consultant) <juan.calderon at ge.com> wrote:
>> Just as a small update, Aldo Salas a certified Java developer is helping
>> me out to finish this project, we have a progress meeting this Thursday,
>> also I sent a paper proposal to OWASP LATAM to present a course on
>> Mod_security for Java this October (that is it should be well tested and
>> finished by then) :)
>
> I can note this milestone in the Project Plan - I will list it for
> November to account for the unlikely event that the deadline slips or
> to demonstrate that we ship it earlier then expected :)
>
>
> --
> Regards,
> Christian Heinrich
> http://www.owasp.org/index.php/user:cmlh


More information about the Esapi-user mailing list