remove security@orc.apache.org from text

[raboof]

this list was shut down per https://issues.apache.org/jira/browse/INFRA-26782

[dongjoon-hyun]

If you look at the JIRA issue title and discussion closely, it ended up to keep it officially by forwarding, @raboof .

ASF Infra team needs to monitor security@orc.

[raboof]

If you look at the JIRA issue title and discussion closely, it ended up to keep it officially by forwarding, @raboof .

Indeed all security@*.apache.org are forwarded to security@apache.org as a failsafe.

We would still prefer reporters to report directly to security@apache.org instead of security@orc.apache.org, since if we see security@orc.apache.org we might make a mistake and incorrectly assume the project is monitoring that list.

ASF Infra team needs to monitor security@orc.

(It's actually the ASF Security team, not the Infra team - but yes we're monitoring it).

[dongjoon-hyun]

No, we don't.

we might make a mistake and incorrectly assume the project is monitoring that list.

I guess it seems that you mean that this PR is an official request from ASF Security team, right, @raboof ?

If this is an official request from ASF Security team, please file an ORC JIRA issue, https://issues.apache.org/jira/projects/ORC, with some reference , @raboof .

For the record, the current reference is completely wrong to me as I mentioned #2625 (review).

this list was shut down per https://issues.apache.org/jira/browse/INFRA-26782

[dongjoon-hyun]

I'm closing this PR. Feel free to reopen it when you are ready.