From 73902627d69ae7a525ed732bbd255a6daaf216e4 Mon Sep 17 00:00:00 2001 From: Antoine Poinsot Date: Tue, 9 May 2023 17:24:09 +0200 Subject: [PATCH] Add a SECURITY.md --- README.md | 5 +++++ SECURITY.md | 10 ++++++++++ 2 files changed, 15 insertions(+) create mode 100644 SECURITY.md diff --git a/README.md b/README.md index bad2e61a..a096b64c 100644 --- a/README.md +++ b/README.md @@ -185,6 +185,11 @@ a graphical interface to the daemon using the [`iced`](https://github.com/iced-r The code for the GUI can be found in the [`gui/src/`](gui/src) folder. +## Security + +See [`SECURITY.md`](SECURITY.md) for details about reporting a security vulnerability or any bug +that could potentially impact the security of users' funds. + ## License Released under the BSD 3-Clause Licence. See the [LICENCE](LICENCE) file. diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..e90f388e --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,10 @@ +# Security policy + +Please report any vulnerability or any bug that could potentially affect the security of users' +funds by mail to [`antoine@wizardsardine.com`](mailto:antoine@wizardsardine.com). + +You may use my GPG public key to encrypt your mail: `590B7292695AFFA5B672CBB2E13FC145CD3F4304`. You +can get it from: +- [`keys.openpg.org`](https://keys.openpgp.org/search?q=darosior%40protonmail.com): `gpg --keyserver hkps://keys.openpgp.org --receive 590B7292695AFFA5B672CBB2E13FC145CD3F4304`. +- [My personal website](http://download.darosior.ninja/darosior.pub) +- [Bitcoin Core's `guix.sigs` Github repository](https://github.com/bitcoin-core/guix.sigs/blob/main/builder-keys/darosior.gpg)