#22163: Make it more obvious how to report security related bugs ------------------------------+---------------------- Reporter: gk | Owner: hiro Type: enhancement | Status: new Priority: Medium | Milestone: Component: Webpages/Website | Version: Severity: Normal | Resolution: Keywords: | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: ------------------------------+----------------------
Comment (by cypherpunks): Yes, this is still very much a problem. The "Contact" page on www.torproject.org says to "email the respective maintainer", but who that person is isn't very clear. Putting the tor-security email address on the contact page is absolutely necessary IMO. I actually reported a (low- severity) security bug through Trac because I couldn't find the tor- security email address, so this is a mistake that people can make with more severe issues that shouldn't be publicly visible. Hiro: Are you the maintainer for the webpages and blog? You're the default owner for newly reported webpage and blog bugs, so I'm assuming that's the case. Could you take a look at https://trac.torproject.org/projects/tor/ticket/22947 when you get a chance? Thanks in advance. Fixing this bug is probably higher-priority, though :) -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22163#comment:6> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs