Page History

...

If we expect cooperation between all parties and stakeholders, we should do our best to match their expectations of being "in the loop" and minimize their surprise. Publicly disclosing a vulnerability without coordinating first can result in panic and an aversion to future cooperation from vendors and finders alike.

CVD promotes continued cooperation and increases the likelihood that future vulnerabilities will also be addressed and remedied.