Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 23:30 UTC
Update SECURITY.md
Matt Holt committed
Jun 12, 2025 at 09:38 UTC
fe26751491cb1a80f50989baa887e2dc0293cd27
1 file changed
+2
-2
.github/SECURITY.md
+2
-2
@@ -48,9 +48,9 @@ We consider publicly-registered domain names to be public information. This nece
48
49
It will speed things up if you suggest a working patch, such as a code diff, and explain why and how it works. Reports that are not actionable, do not contain enough information, are too pushy/demanding, or are not able to convince us that it is a viable and practical attack on the web server itself may be deferred to a later time or possibly ignored, depending on available resources. Priority will be given to credible, responsible reports that are constructive, specific, and actionable. (We get a lot of invalid reports.) Thank you for understanding.
50
51
-When you are ready, please email Matt Holt (the author) directly: matt at dyanim dot com.
51
+When you are ready, please submit a [new private vulnerability report](https://github.com/caddyserver/caddy/security/advisories/new).
52
53
-Please don't encrypt the email body. It only makes the process more complicated.
53
+Please don't encrypt the message. It only makes the process more complicated.
54
55
Please also understand that due to our nature as an open source project, we do not have a budget to award security bounties. We can only thank you.
56