diff options
| author | Wladimir J. van der Laan <laanwj@gmail.com> | 2019-06-05 15:30:17 +0200 |
|---|---|---|
| committer | Wladimir J. van der Laan <laanwj@gmail.com> | 2019-06-05 15:30:22 +0200 |
| commit | 03e2786f05c88f978d9fc830668b8f8cd8b5551f (patch) | |
| tree | 0c2f02b060e9616e9f92268de27a72a2edea6da6 | |
| parent | d936cf9eaf8332843049cd2eb6323726ece41cb3 (diff) | |
| parent | fdd7fa19a9fdc6f15208280201e0ce186e35a9c8 (diff) | |
| download | bitcoin-03e2786f05c88f978d9fc830668b8f8cd8b5551f.tar.xz | |
Merge #16140: docs: create security policy
fdd7fa19a docs: create security policy (Neha Narula)
Pull request description:
Github has started supporting SECURITY.md to contain a project's
security policy. Right now, the only place to find this project's
security contact is on bitcoincore.org. Adding this information to the
repository makes it easier to find as SECURITY.md becomes a standard.
This is copied almost exactly from https://bitcoincore.org/en/contact/
and based on conversations with EthanHeilman.
ACKs for commit fdd7fa:
laanwj:
ACK fdd7fa19a9fdc6f15208280201e0ce186e35a9c8
Tree-SHA512: 9d6b93d10fff6e9c7a5cb6d8c1f0660623cd7a015abac7738f2aa9d141075456e71612b830eb5c707275529e2099fb41a44c531e29d821c9d2857d22241a91c3
| -rw-r--r-- | SECURITY.md | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..80b41030b7 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,25 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 0.18 | :white_check_mark: | +| 0.17 | :white_check_mark: | +| 0.16 | :white_check_mark: | +| 0.15 | :white_check_mark: | +| < 0.15 | :x: | + +## Reporting a Vulnerability + +To report security issues send an email to security@bitcoincore.org (not for support). + +The following keys may be used to communicate sensitive information to developers: + +| Name | Fingerprint | +|------|-------------| +| Wladimir van der Laan | 71A3 B167 3540 5025 D447 E8F2 7481 0B01 2346 C9A6 | +| Jonas Schnelli | 32EE 5C4C 3FA1 5CCA DB46 ABE5 29D4 BCB6 416F 53EC | +| Pieter Wuille | 133E AC17 9436 F14A 5CF1 B794 860F EB80 4E66 9320 | + +You can import a key by running the following command with that individual’s fingerprint: `gpg --recv-keys "<fingerprint>"` Ensure that you put quotes around fingerprints containing spaces. |