[tor-bugs] #25131 [Webpages/Website]: Add a security.txt file to torproject.org

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#25131: Add a security.txt file to torproject.org
----------------------------------+--------------------
     Reporter:  teor              |      Owner:  (none)
         Type:  enhancement       |     Status:  new
     Priority:  Medium            |  Milestone:
    Component:  Webpages/Website  |    Version:
     Severity:  Normal            |   Keywords:
Actual Points:                    |  Parent ID:
       Points:                    |   Reviewer:
      Sponsor:                    |
----------------------------------+--------------------
 security.txt files give people the information they need to contact Tor
 when they find a security issue.

 It's an IETF draft, and Google has done it, so maybe we should too:
 https://securitytxt.org/

 We can use the existing information at:
 https://www.torproject.org/about/contact#security

 And we might want to:
 * add a PGP key file
 * add a signature
 * maybe add a policy or acknowledgements when we decide how they work

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25131>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs