t('This page hosts our security policies and information with regards to reporting security flaws. Learn more about how Nextcloud offers the best security in the open source file sync and share industry here. You can');?> t('follow our advisories via RSS.');?>
t('For server owners, our documentation has a section with');?> best practices and tips on securing a Nextcloud server.');?>
t('If you have discovered a security issue with Nextcloud, please read our responsible disclosure guidelines and contact us at hackerone.com/nextcloud. Your report should include:');?>
t('A member of the security team will confirm the vulnerability, determine its impact, and develop a fix. The fix will be applied to the master branch, tested, and packaged in the next security release. The vulnerability will be publicly announced after the release. Finally, your name will be added to the hall of fame as a thank you from the entire Nextcloud community. Note our threat model to know what is expected behavior.');?>
t('In order to facilitate secure submission of security issues, we provide the following PGP key for confidential submission:');?>
A724937A
');?>2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A
');?>t('We do however recommend to not encrypt the information submitted via HackerOne as only a small subset of the team has access to this key.');?>
t('The Nextcloud community kindly requests that you comply with the following guidelines when researching and reporting security vulnerabilities:');?>
t('Nextcloud Server:');?>
t('Nextcloud Android Client:');?>