Note that security issues shouldn't be reported using the bug tracker

Add myself as security contact as discussed on ijbswa-devel@
months ago.

diff --git a/doc/source/contacting.sgml b/doc/source/contacting.sgml
index 79b6ac7..1b248a8 100644 (file)
--- a/doc/source/contacting.sgml
+++ b/doc/source/contacting.sgml
@@ -3,7 +3,7 @@
 
  Purpose     :  Entity included in other project documents.
 
- $Id: contacting.sgml,v 2.36 2013/03/02 14:39:38 fabiankeil Exp $
+ $Id: contacting.sgml,v 2.37 2013/12/16 11:31:07 fabiankeil Exp $
 
  Copyright (C) 2001-2011 Privoxy Developers http://www.privoxy.org/
  See LICENSE.
@@ -287,7 +287,7 @@ debug  8192 # Non-fatal errors</literallayout>
 
 <sect3 id="contact-bugs"><title>Reporting Bugs</title>
 <para>
- Please report all bugs through our bug tracker:
+ Please report bugs that aren't security issues through our bug tracker:
  <ulink url="http://sourceforge.net/tracker/?group_id=11118&amp;atid=111118">http://sourceforge.net/tracker/?group_id=11118&amp;atid=111118</ulink>.
 </para>
 
@@ -301,6 +301,20 @@ debug  8192 # Non-fatal errors</literallayout>
 </sect3>
 </sect2>
 
+<sect2 id="security-contact"><title>Reporting security problems</title>
+<para>
+ If you discovered a security problem or merely suspect that a bug might
+ be a security issue, please mail Fabian Keil &lt;fk@fabiankeil.de>
+ (OpenPGP fingerprint: 4F36 C17F 3816 9136 54A1 E850 6918 2291 8BA2 371C).
+</para>
+<para>
+ Usually you should get a response within a day, otherwise it's
+ likely that either your mail or the response didn't make it.
+ If that happens, please mail to the developer list to request a
+ status update.
+</para>
+</sect2>
+
 <sect2 id="contact-feature"><title>Request New Features</title>
 <para>
  You are welcome to submit ideas on new features or other proposals