Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/openpgpjs/openpgpjs.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorlarabr <larabr@protonmail.com>2021-07-23 15:06:34 +0300
committerGitHub <noreply@github.com>2021-07-23 15:06:34 +0300
commitda60fa0047092bb59ca3146380745ed7bb6b5c74 (patch)
tree20698fa12fa95c55bf44dd8f646dd83a10a0c56e /SECURITY.md
parentd9829fce069e826cfb3f034a8ee4bf1a064b269c (diff)
Add security policy (#1388)
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..5f465ffb
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+## Reporting Security Issues
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+If you believe you have found a security vulnerability in OpenPGP.js, please report it via email to [security@openpgpjs.org](mailto:security@openpgpjs.org). If possible, encrypt your message with our PGP key: it can be downloaded automatically using [WKD](https://wiki.gnupg.org/WKD), or manually on [openpgpjs.org](https://openpgpjs.org/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb?l=security).
+
+You should receive a response within 2 working days. \ No newline at end of file