[tor-bugs] #25131 [Webpages/Website]: Add a security.txt file to torproject.org

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Feb 3 11:33:44 UTC 2018


#25131: Add a security.txt file to torproject.org
----------------------------------+--------------------
     Reporter:  teor              |      Owner:  (none)
         Type:  enhancement       |     Status:  new
     Priority:  Medium            |  Milestone:
    Component:  Webpages/Website  |    Version:
     Severity:  Normal            |   Keywords:
Actual Points:                    |  Parent ID:
       Points:                    |   Reviewer:
      Sponsor:                    |
----------------------------------+--------------------
 security.txt files give people the information they need to contact Tor
 when they find a security issue.

 It's an IETF draft, and Google has done it, so maybe we should too:
 https://securitytxt.org/

 We can use the existing information at:
 https://www.torproject.org/about/contact#security

 And we might want to:
 * add a PGP key file
 * add a signature
 * maybe add a policy or acknowledgements when we decide how they work

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25131>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list