[Owasp-topten] Extension to Comment Period for 2010 RC1?

Dave Wichers dave.wichers at aspectsecurity.com
Tue Dec 15 17:24:24 EST 2009

It's a reasonable question, but I would prefer not to extend it. People
have had 1 month to comment on it and the amount of comments I have been
receiving lately has dropped to a trickle.

The other reason I'd like not to extend it as I want to get it done and
released before the next update to the SANS Top 25, which is supposed to
be released in February. I don't want the final release of the OWASP Top
10- 2010 to get lost in the noise of the next SANS Top 25 update.

That's why I'm going to try to get the Top 10 done and out the door by
Mid January if possible. That's my current plan anyway.


-----Original Message-----
From: owasp-topten-bounces at lists.owasp.org
[mailto:owasp-topten-bounces at lists.owasp.org] On Behalf Of Christian
Sent: Tuesday, December 15, 2009 5:17 PM
To: OWASP-TopTen at lists.owasp.org
Subject: [Owasp-topten] Extension to Comment Period for 2010 RC1?


It is possible that a number of comments may not be received due to
the upcoming holiday period which could lead the public to
(incorrectly) conclude that OWASP was trying to ensure a minimal
debate on the Release Candidate.

Would it be possible to extend the public comment period for the 2010
RC1 till the end of February 2010 (to account for people returning to
work) as I doubt that any additional action (such as printing, etc)
can commence until at least the end of January 2010?

Christian Heinrich - http://sn.im/cmlh_linkedin_profile
OWASP "Google Hacking" Project Lead - http://sn.im/owasp_google_hacking
Speaking Schedule at http://sn.im/cmlh_speaking_schedule
Owasp-topten mailing list
Owasp-topten at lists.owasp.org

More information about the Owasp-topten mailing list