Empathy List Archives

AH

Arthur Hicken

Thu, Mar 14, 2013 12:06 AM

I think what Alec is proposing is the right path - just make sure we
have all options. Just a few changes, like it's not desktop vs server,
but the cost of each - our customers almost always use both.

metered scan (pay-per-line) license
pay-per-application license
unlimited / perpetual licenses
time-based subscriptions
per user
site license: what layers (## of users) are offered? ELA - Group, etc.
All you can eat licenses (like site, but multiple products)
desktop seats
server costs

and also cover license enforcement type

License Server
local / node-locked
user locked
floating
trust or contract based

etc.

wasc-satec-request@lists.webappsec.org
mailto:wasc-satec-request@lists.webappsec.org
March 8, 2013 1:46 PM
Send wasc-satec mailing list submissions to
wasc-satec@lists.webappsec.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

or, via email, send a message with subject or body 'help' to
wasc-satec-request@lists.webappsec.org

You can reach the person managing the list at
wasc-satec-owner@lists.webappsec.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of wasc-satec digest..."
Today's Topics:

Re: 7.4 Licensing Scheme (Sherif Koussa)
Re: 7.4 Licensing Scheme (McGovern, James)

wasc-satec mailing list
wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

Regards,

Arthur Hicken
Evangelist
ParaSoft Corporation - "We Make Software Work"
Tel: (626) 275-2445
Mobile: (909) 728-9232
Fax: (626) 305-9048

Web: Parasoft.com http://parasoft.com
Twitter: @ParasoftArthur https://twitter.com/parasoftArthur
@CodeCurmudgeon http://twitter.com/CodeCurmudgeon
Facebook: CodeCurmudgeon http://facebook.com/CodeCurmudgeon
LinkedIn: ArthurHicken http://www.linkedin.com/in/arthurhicken
Google+ CodeCurmudgeon https://plus.google.com/101492994525913769354
Static Analysis for Fun and Profit
https://plus.google.com/communities/102740030842791003286

I think what Alec is proposing is the right path - just make sure we have all options. Just a few changes, like it's not desktop vs server, but the cost of each - our customers almost always use both. - metered scan (pay-per-line) license - pay-per-application license - unlimited / perpetual licenses - time-based subscriptions - per user - site license: what layers (## of users) are offered? ELA - Group, etc. - All you can eat licenses (like site, but multiple products) - desktop seats - server costs and also cover license enforcement type License Server local / node-locked user locked floating trust or contract based etc. > wasc-satec-request@lists.webappsec.org > <mailto:wasc-satec-request@lists.webappsec.org> > March 8, 2013 1:46 PM > Send wasc-satec mailing list submissions to > wasc-satec@lists.webappsec.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > > or, via email, send a message with subject or body 'help' to > wasc-satec-request@lists.webappsec.org > > You can reach the person managing the list at > wasc-satec-owner@lists.webappsec.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wasc-satec digest..." > Today's Topics: > > 1. Re: 7.4 Licensing Scheme (Sherif Koussa) > 2. Re: 7.4 Licensing Scheme (McGovern, James) > _______________________________________________ > wasc-satec mailing list > wasc-satec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org Regards, Arthur Hicken Evangelist ParaSoft Corporation - "We Make Software Work" Tel: (626) 275-2445 Mobile: (909) 728-9232 Fax: (626) 305-9048 Web: Parasoft.com <http://parasoft.com> Twitter: @ParasoftArthur <https://twitter.com/parasoftArthur> @CodeCurmudgeon <http://twitter.com/CodeCurmudgeon> Facebook: CodeCurmudgeon <http://facebook.com/CodeCurmudgeon> LinkedIn: ArthurHicken <http://www.linkedin.com/in/arthurhicken> Google+ CodeCurmudgeon <https://plus.google.com/101492994525913769354> Static Analysis for Fun and Profit <https://plus.google.com/communities/102740030842791003286>

SK

Sherif Koussa

Sun, Mar 17, 2013 4:46 PM

So I updated the criteria with most of the licensing factors suggested. I
am not sure I can the necessity for enforcement types, unless there is
something I am missing, why would an SCA tool evaluator care about
the enforcement type if he\she understand the licensing scheme properly?

Regards,
Sherif

On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken
arthur.hicken@parasoft.comwrote:

I think what Alec is proposing is the right path - just make sure we have
all options. Just a few changes, like it's not desktop vs server, but the
cost of each - our customers almost always use both.

metered scan (pay-per-line) license
pay-per-application license
unlimited / perpetual licenses
time-based subscriptions
per user
site license: what layers (## of users) are offered? ELA - Group, etc.
All you can eat licenses (like site, but multiple products)
desktop seats
server costs

and also cover license enforcement type

License Server
local / node-locked
user locked
floating
trust or contract based

etc.

wasc-satec-request@lists.webappsec.org
March 8, 2013 1:46 PM
Send wasc-satec mailing list submissions to
wasc-satec@lists.webappsec.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

or, via email, send a message with subject or body 'help' to
wasc-satec-request@lists.webappsec.org

You can reach the person managing the list at
wasc-satec-owner@lists.webappsec.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of wasc-satec digest..."
Today's Topics:

Re: 7.4 Licensing Scheme (Sherif Koussa)
Re: 7.4 Licensing Scheme (McGovern, James)

wasc-satec mailing list
wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

Regards,

Arthur Hicken
Evangelist
ParaSoft Corporation - "We Make Software Work"
Tel: (626) 275-2445
Mobile: (909) 728-9232
Fax: (626) 305-9048

Web: Parasoft.com http://parasoft.com
Twitter: @ParasoftArthur https://twitter.com/parasoftArthur
@CodeCurmudgeon http://twitter.com/CodeCurmudgeon
Facebook: CodeCurmudgeon http://facebook.com/CodeCurmudgeon
LinkedIn: ArthurHicken http://www.linkedin.com/in/arthurhicken
Google+ CodeCurmudgeon https://plus.google.com/101492994525913769354 Static
Analysis for Fun and Profithttps://plus.google.com/communities/102740030842791003286

wasc-satec mailing list
wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

So I updated the criteria with most of the licensing factors suggested. I am not sure I can the necessity for enforcement types, unless there is something I am missing, why would an SCA tool evaluator care about the enforcement type if he\she understand the licensing scheme properly? Regards, Sherif On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken <arthur.hicken@parasoft.com>wrote: > I think what Alec is proposing is the right path - just make sure we have > all options. Just a few changes, like it's not desktop vs server, but the > cost of each - our customers almost always use both. > > - metered scan (pay-per-line) license > - pay-per-application license > - unlimited / perpetual licenses > - time-based subscriptions > - per user > - site license: what layers (## of users) are offered? ELA - Group, etc. > - All you can eat licenses (like site, but multiple products) > - desktop seats > - server costs > > and also cover license enforcement type > > License Server > local / node-locked > user locked > floating > trust or contract based > > etc. > > > wasc-satec-request@lists.webappsec.org > March 8, 2013 1:46 PM > Send wasc-satec mailing list submissions to > wasc-satec@lists.webappsec.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > > or, via email, send a message with subject or body 'help' to > wasc-satec-request@lists.webappsec.org > > You can reach the person managing the list at > wasc-satec-owner@lists.webappsec.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wasc-satec digest..." > Today's Topics: > > 1. Re: 7.4 Licensing Scheme (Sherif Koussa) > 2. Re: 7.4 Licensing Scheme (McGovern, James) > _______________________________________________ > wasc-satec mailing list > wasc-satec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > > > > Regards, > > Arthur Hicken > Evangelist > ParaSoft Corporation - "We Make Software Work" > Tel: (626) 275-2445 > Mobile: (909) 728-9232 > Fax: (626) 305-9048 > > Web: Parasoft.com <http://parasoft.com> > Twitter: @ParasoftArthur <https://twitter.com/parasoftArthur> > @CodeCurmudgeon <http://twitter.com/CodeCurmudgeon> > Facebook: CodeCurmudgeon <http://facebook.com/CodeCurmudgeon> > LinkedIn: ArthurHicken <http://www.linkedin.com/in/arthurhicken> > Google+ CodeCurmudgeon <https://plus.google.com/101492994525913769354> Static > Analysis for Fun and Profit<https://plus.google.com/communities/102740030842791003286> > > > _______________________________________________ > wasc-satec mailing list > wasc-satec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > >

MJ

McGovern, James

Sun, Mar 17, 2013 7:51 PM

Enforcement type can be understood upfront in isolation but could create challenges down the road. Picture the scenario of a large enterprise doing 100% of its software development in-house. The latest reorganization comes down and you get a new CIO who wants to outsource all software development to HP. Now you have a licensing problem you didn't have before.

From: wasc-satec [mailto:wasc-satec-bounces@lists.webappsec.org] On Behalf Of Sherif Koussa
Sent: Sunday, March 17, 2013 12:46 PM
To: Arthur Hicken
Cc: wasc-satec@lists.webappsec.org
Subject: Re: [WASC-SATEC] 7.4 Licensing wasc-satec Digest, Vol 15, Issue 4

So I updated the criteria with most of the licensing factors suggested. I am not sure I can the necessity for enforcement types, unless there is something I am missing, why would an SCA tool evaluator care about the enforcement type if he\she understand the licensing scheme properly?

Regards,
Sherif

On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken <arthur.hicken@parasoft.com mailto:arthur.hicken@parasoft.com> wrote:
I think what Alec is proposing is the right path - just make sure we have all options. Just a few changes, like it's not desktop vs server, but the cost of each - our customers almost always use both.

metered scan (pay-per-line) license
pay-per-application license
unlimited / perpetual licenses
time-based subscriptions
per user
site license: what layers (## of users) are offered? ELA - Group, etc.
All you can eat licenses (like site, but multiple products)
desktop seats
server costs

and also cover license enforcement type

License Server
local / node-locked
user locked
floating
trust or contract based

etc.

[cid:image001.jpg@01CE2315.12271680]
wasc-satec-request@lists.webappsec.org mailto:wasc-satec-request@lists.webappsec.org
March 8, 2013 1:46 PM
Send wasc-satec mailing list submissions to
wasc-satec@lists.webappsec.org mailto:wasc-satec@lists.webappsec.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

or, via email, send a message with subject or body 'help' to
wasc-satec-request@lists.webappsec.org mailto:wasc-satec-request@lists.webappsec.org

You can reach the person managing the list at
wasc-satec-owner@lists.webappsec.org mailto:wasc-satec-owner@lists.webappsec.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of wasc-satec digest..."
Today's Topics:

Re: 7.4 Licensing Scheme (Sherif Koussa)
Re: 7.4 Licensing Scheme (McGovern, James)

wasc-satec mailing list
wasc-satec@lists.webappsec.org mailto:wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

Regards,

Arthur Hicken
Evangelist
ParaSoft Corporation - "We Make Software Work"
Tel: (626) 275-2445tel:%28626%29%20275-2445
Mobile: (909) 728-9232tel:%28909%29%20728-9232
Fax: (626) 305-9048tel:%28626%29%20305-9048

Web: Parasoft.comhttp://parasoft.com
Twitter: @ParasoftArthurhttps://twitter.com/parasoftArthur @CodeCurmudgeonhttp://twitter.com/CodeCurmudgeon
Facebook: CodeCurmudgeonhttp://facebook.com/CodeCurmudgeon
LinkedIn: ArthurHickenhttp://www.linkedin.com/in/arthurhicken
Google+ CodeCurmudgeonhttps://plus.google.com/101492994525913769354 Static Analysis for Fun and Profithttps://plus.google.com/communities/102740030842791003286

wasc-satec mailing list
wasc-satec@lists.webappsec.org mailto:wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

Enforcement type can be understood upfront in isolation but could create challenges down the road. Picture the scenario of a large enterprise doing 100% of its software development in-house. The latest reorganization comes down and you get a new CIO who wants to outsource all software development to HP. Now you have a licensing problem you didn't have before. From: wasc-satec [mailto:wasc-satec-bounces@lists.webappsec.org] On Behalf Of Sherif Koussa Sent: Sunday, March 17, 2013 12:46 PM To: Arthur Hicken Cc: wasc-satec@lists.webappsec.org Subject: Re: [WASC-SATEC] 7.4 Licensing wasc-satec Digest, Vol 15, Issue 4 So I updated the criteria with most of the licensing factors suggested. I am not sure I can the necessity for enforcement types, unless there is something I am missing, why would an SCA tool evaluator care about the enforcement type if he\she understand the licensing scheme properly? Regards, Sherif On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken <arthur.hicken@parasoft.com<mailto:arthur.hicken@parasoft.com>> wrote: I think what Alec is proposing is the right path - just make sure we have all options. Just a few changes, like it's not desktop vs server, but the cost of each - our customers almost always use both. - metered scan (pay-per-line) license - pay-per-application license - unlimited / perpetual licenses - time-based subscriptions - per user - site license: what layers (## of users) are offered? ELA - Group, etc. - All you can eat licenses (like site, but multiple products) - desktop seats - server costs and also cover license enforcement type License Server local / node-locked user locked floating trust or contract based etc. [cid:image001.jpg@01CE2315.12271680] wasc-satec-request@lists.webappsec.org<mailto:wasc-satec-request@lists.webappsec.org> March 8, 2013 1:46 PM Send wasc-satec mailing list submissions to wasc-satec@lists.webappsec.org<mailto:wasc-satec@lists.webappsec.org> To subscribe or unsubscribe via the World Wide Web, visit http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org or, via email, send a message with subject or body 'help' to wasc-satec-request@lists.webappsec.org<mailto:wasc-satec-request@lists.webappsec.org> You can reach the person managing the list at wasc-satec-owner@lists.webappsec.org<mailto:wasc-satec-owner@lists.webappsec.org> When replying, please edit your Subject line so it is more specific than "Re: Contents of wasc-satec digest..." Today's Topics: 1. Re: 7.4 Licensing Scheme (Sherif Koussa) 2. Re: 7.4 Licensing Scheme (McGovern, James) _______________________________________________ wasc-satec mailing list wasc-satec@lists.webappsec.org<mailto:wasc-satec@lists.webappsec.org> http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org Regards, Arthur Hicken Evangelist ParaSoft Corporation - "We Make Software Work" Tel: (626) 275-2445<tel:%28626%29%20275-2445> Mobile: (909) 728-9232<tel:%28909%29%20728-9232> Fax: (626) 305-9048<tel:%28626%29%20305-9048> Web: Parasoft.com<http://parasoft.com> Twitter: @ParasoftArthur<https://twitter.com/parasoftArthur> @CodeCurmudgeon<http://twitter.com/CodeCurmudgeon> Facebook: CodeCurmudgeon<http://facebook.com/CodeCurmudgeon> LinkedIn: ArthurHicken<http://www.linkedin.com/in/arthurhicken> Google+ CodeCurmudgeon<https://plus.google.com/101492994525913769354> Static Analysis for Fun and Profit<https://plus.google.com/communities/102740030842791003286> _______________________________________________ wasc-satec mailing list wasc-satec@lists.webappsec.org<mailto:wasc-satec@lists.webappsec.org> http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

SK

Sherif Koussa

Mon, Mar 18, 2013 1:07 AM

ok, that makes sense. Changed the document.

Regards,
Sherif

On Sun, Mar 17, 2013 at 3:51 PM, McGovern, James james.mcgovern@hp.comwrote:

Enforcement type can be understood upfront in isolation but could create
challenges down the road. Picture the scenario of a large enterprise doing
100% of its software development in-house. The latest reorganization comes
down and you get a new CIO who wants to outsource all software development
to HP. Now you have a licensing problem you didn’t have before.****

From: wasc-satec [mailto:wasc-satec-bounces@lists.webappsec.org] On
Behalf Of Sherif Koussa
Sent: Sunday, March 17, 2013 12:46 PM
To: Arthur Hicken
Cc: wasc-satec@lists.webappsec.org
Subject: Re: [WASC-SATEC] 7.4 Licensing wasc-satec Digest, Vol 15,
Issue 4**

So I updated the criteria with most of the licensing factors suggested. I
am not sure I can the necessity for enforcement types, unless there is
something I am missing, why would an SCA tool evaluator care about
the enforcement type if he\she understand the licensing scheme properly?**
**

Regards,****

Sherif****

On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken arthur.hicken@parasoft.com
wrote:****

I think what Alec is proposing is the right path - just make sure we have
all options. Just a few changes, like it's not desktop vs server, but the
cost of each - our customers almost always use both.

metered scan (pay-per-line) license
pay-per-application license
unlimited / perpetual licenses
time-based subscriptions
per user
site license: what layers (## of users) are offered? ELA - Group, etc.
All you can eat licenses (like site, but multiple products)
desktop seats
server costs

and also cover license enforcement type

License Server
local / node-locked
user locked
floating
trust or contract based

etc.

wasc-satec-request@lists.webappsec.orgwasc-satec-request@lists.webappsec.org

March 8, 2013 1:46 PM****

Send wasc-satec mailing list submissions to
wasc-satec@lists.webappsec.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

or, via email, send a message with subject or body 'help' to
wasc-satec-request@lists.webappsec.org

You can reach the person managing the list at
wasc-satec-owner@lists.webappsec.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of wasc-satec digest..."****

Today's Topics:

Re: 7.4 Licensing Scheme (Sherif Koussa)
Re: 7.4 Licensing Scheme (McGovern, James)****

wasc-satec mailing list
wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

Regards,

Arthur Hicken
Evangelist
ParaSoft Corporation - "We Make Software Work"
Tel: (626) 275-2445
Mobile: (909) 728-9232
Fax: (626) 305-9048

Web: Parasoft.com http://parasoft.com
Twitter: @ParasoftArthur https://twitter.com/parasoftArthur
@CodeCurmudgeon http://twitter.com/CodeCurmudgeon
Facebook: CodeCurmudgeon http://facebook.com/CodeCurmudgeon
LinkedIn: ArthurHicken http://www.linkedin.com/in/arthurhicken
Google+ CodeCurmudgeon https://plus.google.com/101492994525913769354 Static
Analysis for Fun and Profithttps://plus.google.com/communities/102740030842791003286

wasc-satec mailing list
wasc-satec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org

ok, that makes sense. Changed the document. Regards, Sherif On Sun, Mar 17, 2013 at 3:51 PM, McGovern, James <james.mcgovern@hp.com>wrote: > Enforcement type can be understood upfront in isolation but could create > challenges down the road. Picture the scenario of a large enterprise doing > 100% of its software development in-house. The latest reorganization comes > down and you get a new CIO who wants to outsource all software development > to HP. Now you have a licensing problem you didn’t have before.**** > > ** ** > > *From:* wasc-satec [mailto:wasc-satec-bounces@lists.webappsec.org] *On > Behalf Of *Sherif Koussa > *Sent:* Sunday, March 17, 2013 12:46 PM > *To:* Arthur Hicken > *Cc:* wasc-satec@lists.webappsec.org > *Subject:* Re: [WASC-SATEC] 7.4 Licensing wasc-satec Digest, Vol 15, > Issue 4**** > > ** ** > > So I updated the criteria with most of the licensing factors suggested. I > am not sure I can the necessity for enforcement types, unless there is > something I am missing, why would an SCA tool evaluator care about > the enforcement type if he\she understand the licensing scheme properly?** > ** > > ** ** > > Regards,**** > > Sherif**** > > ** ** > > On Wed, Mar 13, 2013 at 8:06 PM, Arthur Hicken <arthur.hicken@parasoft.com> > wrote:**** > > I think what Alec is proposing is the right path - just make sure we have > all options. Just a few changes, like it's not desktop vs server, but the > cost of each - our customers almost always use both. > > - metered scan (pay-per-line) license > - pay-per-application license > - unlimited / perpetual licenses > - time-based subscriptions > - per user > - site license: what layers (## of users) are offered? ELA - Group, etc. > - All you can eat licenses (like site, but multiple products) > - desktop seats > - server costs > > and also cover license enforcement type > > License Server > local / node-locked > user locked > floating > trust or contract based > > etc. > > > > **** > > **** > > *wasc-satec-request@lists.webappsec.org*<wasc-satec-request@lists.webappsec.org> > **** > > March 8, 2013 1:46 PM**** > > Send wasc-satec mailing list submissions to > wasc-satec@lists.webappsec.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > > or, via email, send a message with subject or body 'help' to > wasc-satec-request@lists.webappsec.org > > You can reach the person managing the list at > wasc-satec-owner@lists.webappsec.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wasc-satec digest..."**** > > Today's Topics: > > 1. Re: 7.4 Licensing Scheme (Sherif Koussa) > 2. Re: 7.4 Licensing Scheme (McGovern, James)**** > > _______________________________________________ > wasc-satec mailing list > wasc-satec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > **** > > ** ** > > > Regards, > > Arthur Hicken > Evangelist > ParaSoft Corporation - "We Make Software Work" > Tel: (626) 275-2445 > Mobile: (909) 728-9232 > Fax: (626) 305-9048 > > Web: Parasoft.com <http://parasoft.com> > Twitter: @ParasoftArthur <https://twitter.com/parasoftArthur> > @CodeCurmudgeon <http://twitter.com/CodeCurmudgeon> > Facebook: CodeCurmudgeon <http://facebook.com/CodeCurmudgeon> > LinkedIn: ArthurHicken <http://www.linkedin.com/in/arthurhicken> > Google+ CodeCurmudgeon <https://plus.google.com/101492994525913769354> Static > Analysis for Fun and Profit<https://plus.google.com/communities/102740030842791003286> > **** > > > _______________________________________________ > wasc-satec mailing list > wasc-satec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-satec_lists.webappsec.org > **** > > ** ** >