View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0000564||Main CAcert Website||website content||public||2008-06-08 15:44||2013-01-15 02:36|
|Fixed in Version||2009 Q2|
|Summary||0000564: security contact information|
|Description||Provide informations on how to contact CAcert for security issues in CAcert software|
* email address
* PGP/GPG public key (signed by 65D0FD58)
* X.509 public key
Reference: (my request on cacert-support)
|Tags||No tags attached.|
GPG is not much supported currently.
X509 has the email email@example.com in the root certificates.
||Do you suggest that I should encrypt emails to firstname.lastname@example.org with the public part of the root key? (that wouldn't make much sense to me)|
||Anyone can send a clear text message to email@example.com then get a signed email back in order to cipher the data.|
I never got a _signed_ message from firstname.lastname@example.org, I will try to get one.
thank you for the hint
I added a paragrah about reporting security issues: http://www.cacert.org/index.php?id=11
Please review and close the bug.
|2008-06-08 15:44||C_A||New Issue|
|2008-06-28 16:58||homer||Note Added: 0001105|
|2008-06-30 17:26||C_A||Note Added: 0001108|
|2008-06-30 17:46||homer||Note Added: 0001109|
|2008-06-30 18:06||C_A||Note Added: 0001110|
|2009-04-09 13:36||Sourcerer||Note Added: 0001351|
|2009-04-09 13:36||Sourcerer||Status||new => solved?|
|2009-04-26 14:43||Sourcerer||Status||solved? => closed|
|2009-04-26 14:43||Sourcerer||Resolution||open => fixed|
|2009-04-26 14:43||Sourcerer||Assigned To||=> Sourcerer|
|2013-01-15 02:36||Werner Dworak||Fixed in Version||=> 2009 Q2|