summaryrefslogtreecommitdiff
path: root/.github/SECURITY.md
AgeCommit message (Collapse)Author
2021-06-14Expand and clarify security policyMatthew Holt
While the Caddy project has had very few valid security bug reports over the years, we have a low signal-to-noise ratio with them (lots of invalid reports). Most are out of scope, and it can take too much valuable time for us to determine that. We would prefer researchers do this first. Hopefully these paragraphs spell out much more clearly what we do and don't accept.
2020-11-12Update contact infoMatthew Holt
2020-10-01Update SECURITY.mdMatt Holt
2020-08-11Update comment and Caddy 1 EOLMatthew Holt
2020-05-20Update SECURITY.mdMatt Holt
2020-04-16Add security policyMatthew Holt