mention security contacts here too

diff --git a/doc/contact.mdwn b/doc/contact.mdwn
index dab09254941c54e6ac3f6a81fb0eb7e5486f3594..afcc677650b8d81fe362330b8da95f673b8ce49a 100644 (file)
--- a/doc/contact.mdwn
+++ b/doc/contact.mdwn
@@ -8,3 +8,10 @@ and IRC, and respond in a timely fashion.
 
 You could also drop by the IRC channel `#ikiwiki` on
 [OFTC](http://www.oftc.net/) (`irc.oftc.net`).
+
+However, if you find a new security vulnerability, please email the maintainers
+privately instead of raising it in a public medium, so that we can
+arrange for coordinated disclosure when a fix is available. The maintainers
+are [[Joey Hess|joey]] (<joey@kitenet.net>),
+[[Simon McVittie|smcv]] (<smcv@debian.org>)
+and [[Amitai Schleier|schmonz]] (<schmonz-web-ikiwiki@schmonz.com>).