From: smcv <smcv@web>
Date: Mon, 19 Dec 2016 20:33:48 +0000 (-0400)
Subject: mention security contacts here too
X-Git-Tag: debian/3.20161219~2
X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/commitdiff_plain/7e78712782123db6f3d01b07197cf821c52a7490

mention security contacts here too
---

diff --git a/doc/contact.mdwn b/doc/contact.mdwn
index dab092549..afcc67765 100644
--- a/doc/contact.mdwn
+++ b/doc/contact.mdwn
@@ -8,3 +8,10 @@ and IRC, and respond in a timely fashion.
 
 You could also drop by the IRC channel `#ikiwiki` on
 [OFTC](http://www.oftc.net/) (`irc.oftc.net`).
+
+However, if you find a new security vulnerability, please email the maintainers
+privately instead of raising it in a public medium, so that we can
+arrange for coordinated disclosure when a fix is available. The maintainers
+are [[Joey Hess|joey]] (<joey@kitenet.net>),
+[[Simon McVittie|smcv]] (<smcv@debian.org>)
+and [[Amitai Schleier|schmonz]] (<schmonz-web-ikiwiki@schmonz.com>).