[tor-bugs] #22163 [Webpages/Website]: Make it more obvious how to report security related bugs

[Tor Bug Tracker & Wiki]

#22163: Make it more obvious how to report security related bugs
------------------------------+----------------------
 Reporter:  gk                |          Owner:  hiro
     Type:  enhancement       |         Status:  new
 Priority:  Medium            |      Milestone:
Component:  Webpages/Website  |        Version:
 Severity:  Normal            |     Resolution:
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+----------------------

Comment (by cypherpunks):

 Yes, this is still very much a problem. The "Contact" page on
 www.torproject.org says to "email the respective maintainer", but who that
 person is isn't very clear. Putting the tor-security email address on the
 contact page is absolutely necessary IMO. I actually reported a (low-
 severity) security bug through Trac because I couldn't find the tor-
 security email address, so this is a mistake that people can make with
 more severe issues that shouldn't be publicly visible.

 Hiro: Are you the maintainer for the webpages and blog? You're the default
 owner for newly reported webpage and blog bugs, so I'm assuming that's the
 case. Could you take a look at
 https://trac.torproject.org/projects/tor/ticket/22947 when you get a
 chance? Thanks in advance. Fixing this bug is probably higher-priority,
 though :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22163#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online