Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create technical-vision.md #47

Merged
merged 4 commits into from
Jan 12, 2021
Merged

Create technical-vision.md #47

merged 4 commits into from
Jan 12, 2021

Conversation

kaywilliams
Copy link
Contributor

See related issue #40

See related issue #40
Copy link
Contributor

@lukehinds lukehinds left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

some comments..

technical-vision.md Outdated Show resolved Hide resolved
technical-vision.md Outdated Show resolved Hide resolved
@david-a-wheeler
Copy link
Contributor

I’d use an Oxford comma and change:

Developers, auditors and regulators
to:
Developers, auditors, and regulators

@david-a-wheeler
Copy link
Contributor

david-a-wheeler commented Jan 8, 2021

One thing that’s not so obvious is that we need to get development tools & libraries modified so that they’re secure by default (the “obvious/default thing to do” is also the secure thing to do). I’d like to think that’s obliquely covered by the phrase "with security handled proactively and as a matter of course”.

But maybe that’s not clear enough. We could emphasize that by adding a bullet after the first one, something like this:

  1. Developers create and maintain tools and libraries that, where practicable, produce results that are secure by default.

* Removed the words 'products and services' from first sentence and used the general term 'software'
* Added a clause for 'by default' in the first sentence to capture this important principle.
* Added a colon to the end of the first sentence to show that the following bullets are a continuation of the vision statement (not a description of current status).
Copy link
Contributor

@lukehinds lukehinds left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 from me.

@david-a-wheeler
Copy link
Contributor

Looks good!

Copy link
Member

@estesp estesp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@rhaning rhaning merged commit 5ec2778 into ossf:main Jan 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants