Browse code

Update with info about tor-security and its public key. (#9186)

kat authored on09/01/2018 19:53:34
Showing1 changed files
... ...
@@ -101,12 +101,21 @@
101 101
     
102 102
 	<a id="security"></a>
103 103
 	<h3><a class="anchor" href="#security">Security Issues</a></h3>
104
-	<p>If you've found a security issue in one of our projects or our
105
-	infrastructure, please email the respective maintainer. You can find
106
-	their GPG fingerprint/key on our <a
107
-	href="https://db.torproject.org">developer ldap search page</a>. Due
108
-	to the many different projects we have, we do not offer a single
109
-	list for security issues.</p>
104
+	<p>If you've found a security issue in one of our projects or in our
105
+	infrastructure, please email tor-security@lists.torproject.org. 
106
+	You can get the GPG public key for the list by contacting 
107
+	tor-security-sendkey@lists.torproject.org or from 
108
+	pool.sks-keyservers.net. Here is the fingerprint:
109
+	<blockquote><pre>
110
+	gpg --fingerprint tor-security@lists.torproject.org
111
+	pub   4096R/1A7BF184 2017-03-13
112
+	      Key fingerprint = 8B90 4624 C5A2 8654 E453  9BC2 E135 A8B4 1A7B F184
113
+	uid                  tor-security@lists.torproject.org <tor-security@lists.torproject.org>
114
+	uid                  tor-security@lists.torproject.org <tor-security-owner@lists.torproject.org>
115
+	uid                  tor-security@lists.torproject.org <tor-security-request@lists.torproject.org>
116
+	sub   4096R/C00942E4 2017-03-13
117
+	</pre></blockquote>
118
+	</p>
110 119
 
111 120
 	<a id="badrelays"></a>
112 121
 	<h3><a class="anchor" href="#badrelays">Report Bad Relays</a></h3>