IIRC there is a way to configure JIRA to support security issues. By support I mean respect the NDA policies.
We can ask to infra if it is feasible. WDYT? Twitter :http://www.twitter.com/m_cucchiara G+ :https://plus.google.com/107903711540963855921 Linkedin :http://www.linkedin.com/in/mauriziocucchiara VisualizeMe: http://vizualize.me/maurizio.cucchiara?r=maurizio.cucchiara Maurizio Cucchiara On 8 August 2013 06:09, Paul Benedict <pbened...@apache.org> wrote: > I think it would be wise to add a nice long message about *not* reporting > security issues through JIRA on our issue tracker summary page and advise > them to email security@. And if there is a way to put this text in the > Create New Issue page, that's good too. >