From 13e9a6f9e98635d694310e87af7b82d180e486e7 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Wed, 23 Aug 2017 16:46:55 -0400 Subject: Document that we care about our infrastructure's security as well (#3874) --- docs/security.rst | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'docs') diff --git a/docs/security.rst b/docs/security.rst index 1673b02c..646b3e22 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -5,6 +5,14 @@ We take the security of ``cryptography`` seriously. The following are a set of policies we have adopted to ensure that security issues are addressed in a timely fashion. +Infrastructure +-------------- + +In addition to ``cryptography``'s code, we're also concerned with the security +of the infrastructure we run (primarily ``cryptography.io`` and +``ci.cryptography.io``). If you discover a security vulnerability in our +infrastructure, we ask you to report it using the same procedure. + What is a security issue? ------------------------- -- cgit v1.2.3