The branch master has been updated
via f8a362841bcc696786c5faa1dcfc8d0c274f92e7 (commit)
from fd21e3cd9ca7c7b7a8465d47e2bfbb728a4865e2 (commit)
- Log -----------------------------------------------------------------
commit f8a362841bcc696786c5faa1dcfc8d0c274f92e7
Author: Rich Salz <rs...@akamai.com>
Date: Wed Apr 18 08:50:48 2018 -0400
Add bug bounty reference
-----------------------------------------------------------------------
Summary of changes:
docs/faq-5-misc.txt | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/docs/faq-5-misc.txt b/docs/faq-5-misc.txt
index b84b595..f2810e5 100644
--- a/docs/faq-5-misc.txt
+++ b/docs/faq-5-misc.txt
@@ -103,3 +103,13 @@ in the next minor release.
It was decided after the release of OpenSSL 0.9.8y the next version should
be 0.9.8za then 0.9.8zb and so on.
+
+* Do you have a bug bounty program?
+
+The project does not. Google runs a program
+@@@https://www.google.com/about/appsecurity/patch-rewards/@@@; so does
+HackerOne, @@@https://hackerone.com/ibb-openssl@@@. In general, if you
+have found a security issue, send email to openssl-secur...@openssl.org.
+Please note that we do not consider DNS configurations or Website
+configuration to be security issues.
+
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
