[tor-bugs] #13966 [Tor]: Publish guidelines for reporting exploits

[Tor Bug Tracker & Wiki]

#13966: Publish guidelines for reporting exploits
-------------------------+-------------------------------------------------
     Reporter:  michael  |      Owner:
         Type:  task     |     Status:  new
     Priority:  normal   |  Milestone:
    Component:  Tor      |    Version:
   Resolution:           |   Keywords:  Exploit, security, response,
Actual Points:           |  documentation, wiki
       Points:           |  Parent ID:
-------------------------+-------------------------------------------------

Comment (by nickm):

 On the short term: if this is the position you're in now, find the name of
 the person who is maintaining that component, find their PGP key, and send
 them an encrypted email. And do it again if you haven't heard back from
 them in a day or two.


 Longer-term: Yes, we should document this!  And maybe even have an alias
 and key for the purpose.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13966#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online