diff --git a/SECURITY.md b/SECURITY.md index fbb781beb..4ef19f881 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,9 +2,12 @@ ## Reporting a Vulnerability -To report security issues, send an email to the addresses listed below (not for support). -Please send any report to all emails listed here. -The following GPG keys may be used to communicate sensitive information to developers. +To report security issues, send an email to the addresses listed below. +(Not for support. Support requests will be *ignored*.) + +Please send any report to *all* emails listed here. + +The following GPG keys may be used to communicate sensitive information. | Name | Email | GPG fingerprint | @@ -12,9 +15,11 @@ The following GPG keys may be used to communicate sensitive information to devel | ThomasV | thomasv [AT] electrum [DOT] org | 6694 D8DE 7BE8 EE56 31BE D950 2BD5 824B 7F94 70E6 | | SomberNight | somber.night [AT] protonmail [DOT] com | 4AD6 4339 DFA0 5E20 B3F6 AD51 E7B7 48CD AF5E 5ED9 | + +#### Where to find GPG keys + You can import a key by running the following command with that individual’s fingerprint: `gpg --recv-keys ""` -Ensure that you put quotes around fingerprints containing spaces. These public keys can also be found in the Electrum git repository, in the top-level `pubkeys` folder.