nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-26 01:32:25 +00:00
Code Issues Projects Releases Wiki Activity

Mention the Secure Contact Key on the Feedback page.

Browse Source 
Both in a new section about reporting vulnerabilities, and in the
section about large attachments (since some large attachments will
surely contain confidential information from the sender).
This commit is contained in:
Simon Tatham 2016-03-27 20:18:21 +01:00
parent c5021a121b
commit caaaf686f5
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/feedback.but
View File

@ -50,6 +50,9 @@ the URL; that way, we don't have to download it unless we decide we
actually need it, and only one of us needs to download it instead of actually need it, and only one of us needs to download it instead of
it being automatically copied to all the developers. it being automatically copied to all the developers.
(If the file contains confidential information, then you could encrypt
it with our Secure Contact Key; see \k{pgpkeys-pubkey} for details.)
Some people like to send mail in MS Word format. Please \e{don't} Some people like to send mail in MS Word format. Please \e{don't}
send us bug reports, or any other mail, as a Word document. Word send us bug reports, or any other mail, as a Word document. Word
documents are roughly fifty times larger than writing the same documents are roughly fifty times larger than writing the same
@ -201,6 +204,20 @@ will explain what you need to know. \e{Then}, if you think the
documentation could usefully have told you that, send us a bug documentation could usefully have told you that, send us a bug
report and explain how you think we should change it. report and explain how you think we should change it.
\H{feedback-vulns} Reporting security vulnerabilities
If you've found a security vulnerability in PuTTY, you might well want
to notify us using an encrypted communications channel, to avoid
disclosing information about the vulnerability before a fixed release
is available.
For this purpose, we provide a GPG key suitable for encryption: the
Secure Contact Key. See \k{pgpkeys-pubkey} for details of this.
(Of course, vulnerabilities are also bugs, so please do include as
much information as possible about them, the same way you would with
any other bug report.)
\H{feedback-features} Requesting extra features \H{feedback-features} Requesting extra features
If you want to request a new feature in PuTTY, the very first things If you want to request a new feature in PuTTY, the very first things