Hello! GNU Guix should make it easier for bug reporters to contact us to report issues in Guix and Guix packages.
So, we'd like to add a short "Security" page to our web site . This page should: 1) Explain how to contact us privately about security issues , 2) Describe the Guix release signing key , 3) And include a link to the security updates section of the manual . The page should be clear and concise. The main objectives are to make it easy for bug reporters to learn how to contact us, and to make it easy for anyone to know which key is used to sign our downloads. Does anyone volunteer to make this page? I like this example, although it does some things we don't plan to do at this time, such as provide a key for securely contacting the project, and explain how to use GnuPG: https://syncthing.net/security.html  Our web site is maintained in guix-artwork.git: git://git.savannah.gnu.org/guix/guix-artwork.git  Private communication should go to <guix-secur...@gnu.org> https://lists.gnu.org/mailman/listinfo/guix-security  The key should be described by the key fingerprint. https://www.gnu.org/software/guix/manual/html_node/Binary-Installation.html  https://www.gnu.org/software/guix/manual/html_node/Security-Updates.html
Description: PGP signature