Create OpenJS CNA Mailing List

[ruddermann]

On the OpenJS CNA Application we need to provide two separate email addresses with mailing lists. The recommendation for these to are:

• Public Point of Contact: [email protected]
• CNA Mailing List Contact: [email protected]

[bensternthal]

@ruddermann Should these lists be private?

[bensternthal]

@ruddermann ping

[ljharb]

@bensternthal like, should membership be private? or emails sent to the list?

[bensternthal]

@ljharb

• Public = anyone can view messages on the web
• Private = limited to those subscribed to the list

We can also control posting permissions, those options are:

• Moderated Discussions: New members cannot post to the list without their emails being approved by a moderator. For new lists, this uses a Groups.io setting that will only moderate users for their first 3 posts.
• Open Discussion: New members can immediately post to the list.
• Announcement: Only moderators can post to the list

[ljharb]

I would assume, then, that it must be private, since security reports may come in via that mechanism. For posting permissions, probably open discussion until there's an issue, at which point we'd lock it down to moderated?