Reply #81: Difference in reporting...

[Solon]

Microsoft has SUED people for independently reporting bugs and security exploits before, you think they would allow anyone to tell you about a security risk before they tried to fix it first? Sometimes this is months after they, not you, know of the exploit. Apache has no such restrictions in reporting, once a security vulnerability is found, it is reported, widely, on the net, and fixed as soon as possible, which type of reporting do you prefer?