[TYPO3-ect] Extension Rating System and Reviews Status

[Michael Stucki]

Hi Elmar,

> Thomas is absolutely right in this point. Don't waist time with
> speculating about ongoings behind scenes. Simply concentrate on what you
> think necessary, do it and do it as public as possible.

I agree partly, but there are things to consider:

- The security team (who is currently responsible for making security
  reviews) is by design working behind closed doors

- They have also discussed a lot about this, results might be worth to be
  merged with your ideas.

- Presenting this in a public list does not mean that they will
  automatically take notice of this!

Please write a short sum-up of your ideas and what you have reached so far,
and send it to the security team (security at typo3.org) so that they will
have the chance to get involved.

> For me this was one of the principles during the startup of ECT and we
> have reached a lot with it.

AKA the "Guerilla tactic"

- Rolling out new features is very easy for most of the time
- Keeping it running is far more difficult
- Not keeping it running doesn't look very professional

For these reasons I highly prefer well-prepared operations, e.g. having
availability contracts before launching new web sites, defining maintainers
before publishing extensions, etc.

Of course that doesn't mean that Guerilla tactic is always bad. Especially
in an Open Source project like TYPO3 I have often learned that the best
strategy is to just act instead of talking too much. Still, these actions
should be arranged with other officials like the T3A or the TYPO3.org
webmaster team to make sure that no duplicate work is done.

- michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/