I write to propose that Apereo implement an email list parallel to
the existing licensing@ that is open membership and open archives.
Open participation and open archives are convenient, effective things. Openness means that when you have something to contribute or want to ask others' kind opinions, you simply join the list and post. When you want to understand whether your question has already been answered, you simply read the archives, or even search. Transparency helps with understanding culture, history, decisions, and where appropriate, challenging these in a more informed and thoughtful way.
I believe openness is also close to the heart of Apereo values.
There are moments for privacy. Indeed, Apache does have private email lists. There's a legal-private@ specifically.
By holding an open email list in parallel with a private list, the closedness and privacy can be reserved for conversations that benefit or need more from that privacy than they would benefit from openness. Having the open parallel reduces the friction to realizing and executing on opportunities for openness.
The easiest path forward might be to create a licensing-open@, so as to require minimal technical change to existing licensing@, and then begin to move licensing conversations that can be held more publicly from closed licensing@ to licensing-open@.
Apereo has precedent for parallel open and closed email lists:
cas-appsec-public has public participation and archives, whereas a
cas-appsec-private triages security issues before it is appropriate that they be discussed publicly.
Kind regards,
Andrew