summaryrefslogtreecommitdiff
path: root/README.asciidoc
diff options
context:
space:
mode:
authorFlorian Bruhin <me@the-compiler.org>2022-12-13 14:24:32 +0100
committerFlorian Bruhin <me@the-compiler.org>2022-12-13 14:24:32 +0100
commit9bf258c8f8fa2c255be92535a64fd356146d8482 (patch)
tree90a4a3747a209cb1faee154775bf7041e38ecb24 /README.asciidoc
parent5afc8a68191160f8d5c74b92874a0032d3c1996e (diff)
downloadqutebrowser-9bf258c8f8fa2c255be92535a64fd356146d8482.tar.gz
qutebrowser-9bf258c8f8fa2c255be92535a64fd356146d8482.zip
doc: Improve security reporting guidelines
See #7524
Diffstat (limited to 'README.asciidoc')
-rw-r--r--README.asciidoc10
1 files changed, 8 insertions, 2 deletions
diff --git a/README.asciidoc b/README.asciidoc
index d68268316..d6ac29cfa 100644
--- a/README.asciidoc
+++ b/README.asciidoc
@@ -66,8 +66,14 @@ ways:
https://listi.jpberlin.de/mailman/listinfo/qutebrowser[mailinglist] at
mailto:qutebrowser@lists.qutebrowser.org[].
-For security bugs, please contact me directly at mail@qutebrowser.org, GPG ID
-https://www.the-compiler.org/pubkey.asc[0x916eb0c8fd55a072].
+Please report security bugs to security@qutebrowser.org
+(or if GPG encryption is desired, contact me@the-compiler.org with GPG ID
+https://www.the-compiler.org/pubkey.asc[0x916EB0C8FD55A072]).
+
+Alternatively,
+https://github.com/qutebrowser/qutebrowser/security/advisories/new[report a vulnerability]
+via GitHub's
+https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability[private reporting feature].
Requirements
------------