New core policy document: Vulnerability disclosures

In our quest for perfection, security is one of the things we have to keep in mind.

Our vulnerability disclosure policy is now online on the Wiki-Wiki. We have also published a PGP (GPG) public key that can be used to send encrypted messages if you discover any such vulnerabilities.

Once the system is online, we’ll also be using the HackerOne platform to invite security researchers to audit our system and disclose any uncovered vulnerabilities.

Leave a Reply