<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Guys, <br>
      <br>
      today we already have an implicit classification: <br>
      if a public mailing-list is on cc, made statements are obviously
      public. <br>
      <br>
      So I don't see why everyone should put a label at the beginning of
      each email to say so. <br>
      And what would we do, with all the emails we receive that don't
      have a label and start with "how are you" or "can you help me with
      xyz question"...<br>
      <br>
      Best regards, Tobias<br>
      <br>
      <br>
      <br>
      On 21/06/14 12:54, Bil Corry wrote:<br>
    </div>
    <blockquote cite="mid:028901cf8d47$84637a20$8d2a6e60$@owasp.org"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-reply;
        font-family:"Arial","sans-serif";
        color:black;
        font-weight:normal;
        font-style:normal;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial","sans-serif";color:black">This
            sounds like something the BoD and Staff should discuss on
            how to implement, since the bulk of the burden of
            classifying documents will be on them.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial","sans-serif";color:black">-
            Bil<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
        <p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
            Dinis Cruz [<a class="moz-txt-link-freetext" href="mailto:dinis.cruz@owasp.org">mailto:dinis.cruz@owasp.org</a>] <br>
            <b>Sent:</b> Friday, June 20, 2014 7:02 AM<br>
            <b>To:</b> Josh Sokol<br>
            <b>Cc:</b> Bil Corry; OWASP GOVERNING<br>
            <b>Subject:</b> Re: [Governance] Transparency Policy<o:p></o:p></span></p>
        <p class="MsoNormal"><o:p> </o:p></p>
        <div>
          <p class="MsoNormal">Labelling documents and emails based on
            the levels outlined would be quite useful, since we could
            then assume that <i>'if there is no classification
              then that email or document could/should be public' </i>(re-enforcing
            the idea that all info is public by default).<o:p></o:p></p>
          <div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
          <div>
            <p class="MsoNormal">This would allow for the easier
              de-classification of such email/document (when the views
              have been clarified/defended)<o:p></o:p></p>
            <div>
              <p class="MsoNormal"><o:p> </o:p></p>
            </div>
            <div>
              <p class="MsoNormal">Dinis<o:p></o:p></p>
            </div>
          </div>
          <div>
            <p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
            <div>
              <p class="MsoNormal">On 19 June 2014 15:05, Josh Sokol
                <<a moz-do-not-send="true"
                  href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>>
                wrote:<o:p></o:p></p>
              <div>
                <div>
                  <p class="MsoNormal" style="margin-bottom:12.0pt">I
                    really like where this is going.  It reads similar
                    to a data classification plan and maybe we should
                    even consider labeling documents based on the levels
                    outlined.  When I have some time, I will try to add
                    additional examples for consideration.  In the
                    meantime, my only advice may be to rephrase the
                    policy violations section at the bottom more along
                    the lines of "including the possibility of
                    suspension or revocation of membership, exclusion
                    from OWASP events and mailing lists, or other such
                    action as determined."<o:p></o:p></p>
                </div>
                <p class="MsoNormal">~josh<o:p></o:p></p>
              </div>
              <div>
                <p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
                <div>
                  <div>
                    <div>
                      <p class="MsoNormal">On Thu, Jun 19, 2014 at 5:18
                        AM, Bil Corry <<a moz-do-not-send="true"
                          href="mailto:bil.corry@owasp.org"
                          target="_blank">bil.corry@owasp.org</a>>
                        wrote:<o:p></o:p></p>
                    </div>
                  </div>
                  <blockquote style="border:none;border-left:solid
                    #CCCCCC 1.0pt;padding:0in 0in 0in
                    6.0pt;margin-left:4.8pt;margin-right:0in">
                    <div>
                      <div>
                        <div>
                          <div>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">Hello
                                Governance,</span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">I
                                am proposing we create (and have the BoD
                                adopt) a policy on transparency to
                                clarify the information that should
                                never be shared publicly.</span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">To
                                that end, I've created an initial draft,
                                which you can find here:</span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><o:p></o:p></p>
                            <p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.5in"><span
style="font-family:"Arial","sans-serif";color:black"><a
                                  moz-do-not-send="true"
                                  href="https://www.owasp.org/index.php/Transparency_Policy"
                                  target="_blank">https://www.owasp.org/index.php/Transparency_Policy</a></span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">I'm
                                requesting discussion and feedback on
                                the draft, along with additional
                                exclusions (I only started with two).</span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">Thank
                                you for your time in advance,</span><o:p></o:p></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black"> </span><span
                                style="color:#888888"><o:p></o:p></span></p>
                            <p class="MsoNormal"
                              style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-family:"Arial","sans-serif";color:black">-
                                Bil</span><span style="color:#888888"><o:p></o:p></span></p>
                          </div>
                        </div>
                        <p class="MsoNormal"><o:p> </o:p></p>
                      </div>
                    </div>
                    <p class="MsoNormal" style="margin-bottom:12.0pt">_______________________________________________<br>
                      Governance mailing list<br>
                      <a moz-do-not-send="true"
                        href="mailto:Governance@lists.owasp.org"
                        target="_blank">Governance@lists.owasp.org</a><br>
                      <a moz-do-not-send="true"
                        href="https://lists.owasp.org/mailman/listinfo/governance"
                        target="_blank">https://lists.owasp.org/mailman/listinfo/governance</a><o:p></o:p></p>
                  </blockquote>
                </div>
                <p class="MsoNormal"><o:p> </o:p></p>
              </div>
              <p class="MsoNormal" style="margin-bottom:12.0pt"><br>
                _______________________________________________<br>
                Governance mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:Governance@lists.owasp.org">Governance@lists.owasp.org</a><br>
                <a moz-do-not-send="true"
                  href="https://lists.owasp.org/mailman/listinfo/governance"
                  target="_blank">https://lists.owasp.org/mailman/listinfo/governance</a><o:p></o:p></p>
            </div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Governance mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Governance@lists.owasp.org">Governance@lists.owasp.org</a>
<a class="moz-txt-link-freetext" href="https://lists.owasp.org/mailman/listinfo/governance">https://lists.owasp.org/mailman/listinfo/governance</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>