[GH-ISSUE #2159] Missing point of contact for security issues #906

New issue

Closed

opened 2026-03-16 00:49:57 +03:00 by kerem · 3 comments

kerem commented

2026-03-16 00:49:57 +03:00

Owner

Originally created by @pspacek on GitHub (Feb 29, 2024).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/2159

It's unclear how to report security issues while keeping all the information confidential.

Examples from other DNS servers:

Originally created by @pspacek on GitHub (Feb 29, 2024). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/2159 It's unclear how to report security issues while keeping all the information confidential. Examples from other DNS servers: - https://github.com/PowerDNS/pdns/?tab=security-ov-file#readme - https://gitlab.isc.org/isc-projects/bind9/-/blob/main/SECURITY.md - https://www.nlnetlabs.nl/security-report/

kerem closed this issue

2026-03-16 00:50:02 +03:00

kerem commented

2026-03-16 00:50:08 +03:00

Author

Owner

@djc commented on GitHub (Feb 29, 2024):

I suggest we enable GitHub's built-in private security vulnerability reporting. @bluejekyll agreed?

@djc commented on GitHub (Feb 29, 2024): I suggest we enable GitHub's built-in private security vulnerability reporting. @bluejekyll agreed?

kerem commented

2026-03-16 00:50:13 +03:00

Author

Owner

@bluejekyll commented on GitHub (Feb 29, 2024):

agreed.

@bluejekyll commented on GitHub (Feb 29, 2024): agreed.

kerem commented

2026-03-16 00:50:18 +03:00

Author

Owner

@djc commented on GitHub (Mar 1, 2024):

I've enabled private vuln reporting and drafted a basic initial security policy in #2163.

@djc commented on GitHub (Mar 1, 2024): I've enabled private vuln reporting and drafted a basic initial security policy in #2163.

kerem referenced this issue

2026-03-16 02:26:59 +03:00

[PR #949] [MERGED] cargo-make automation #1815