Document how to report security issues.

[wiki] / security.mdwn

diff --git a/security.mdwn b/security.mdwn
index 7aae06a..aa05ea3 100644 (file)
--- a/security.mdwn
+++ b/security.mdwn
@@ -1,3 +1,9 @@
+## Reporting security issues
+
+In case you have found a security issue in tinc, please report it via email
+to Guus Sliepen <guus@tinc-vpn.org>, preferrably PGP encrypted.
+We will then try to get a CVE number assigned, and coordinate a bugfix release with major Linux distributions.
+
 ## Security advisories
 
 The following list contains advisories for security issues in tinc in old versions: