Re: Collecting potential security issues

• From: Evan Prodromou <evan@prodromou.name>
• Date: Wed, 24 Apr 2024 23:31:27 -0400
• To: Johannes Ernst <johannes.ernst@gmail.com>, public-swicg@w3.org
• Message-ID: <4269eccd-2395-4c09-ab9f-1383f7ac9d9e@prodromou.name>

There's a security.md here:

https://github.com/w3c/activitypub/blob/gh-pages/SECURITY.md

We used it for the uploaded-JSON-LD issue.

Evan

On 2024-04-24 11:07 p.m., Johannes Ernst wrote:
> Is there a process for reporting / collecting / fixing etc potential security issues related to ActivityPub or other Fediverse-relevant protocols and protocol combinations?
>
> (Not the implementations … those have their own reporting processes.)
>
> If there is not, should there be?
>
> Thanks,
>
>
>
> Johannes.
>
>

Received on Thursday, 25 April 2024 03:31:46 UTC