[tor-bugs] #13966 [Tor]: Publish guidelines for reporting exploits

[Tor Bug Tracker & Wiki]

#13966: Publish guidelines for reporting exploits
-------------------------------------------------+-------------------------
 Reporter:  michael                              |          Owner:
     Type:  task                                 |         Status:  new
 Priority:  normal                               |      Milestone:
Component:  Tor                                  |        Version:
 Keywords:  Exploit, security, response,         |  Actual Points:
  documentation, wiki                            |         Points:
Parent ID:                                       |
-------------------------------------------------+-------------------------
 There exists no easy to find documentation (on the wiki nor elsewhere)
 that advises how to report a suspected Tor (proxy, browser, bundle,
 transport...) exploit. And no search on keyservers shows up a 'security'
 key for a tor-sec at torproject.org or similar account.

 A blueprint for working this task could be: Just figure out how we've been
 handling exploit reporting in the past (tor-assistants@ maybe?) and make
 sure it's a consensus, and write it down in the wiki.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13966>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online