diff --git a/SECURITY.md b/SECURITY.md index 7589a41..3838122 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,5 +2,6 @@ ## Reporting a Vulnerability -The best way to contact us is to send a message to [@tommy:arcticfoxes.net](https://matrix.to/#/@tommy:arcticfoxes.net) or [@randomhydrosol:grapheneos.org](https://matrix.to/#/@randomhydrosol:grapheneos.org) on [Matrix](https://matrix.org/). -Alternatively, please send an email to [tommy@privsec.dev](mailto:tommy@privsec.dev). We would appreciate it if you can encrypt the message. The PGP key can be founded [here](https://tommytran.io/tommy.asc). +Preferably, please contact [@tommy:arcticfoxes.net](https://invite.arcticfoxes.net/#/@tommy:arcticfoxes.net) and/or [@wj25czxj47bu6q:arcticfoxes.net](https://invite.arcticfoxes.net/#/@wj25czxj47bu6q:arcticfoxes.net) on [Matrix](https://joinmatrix.org). If ArcticFoxes is down for any reason, wj25czxj47bu6q's backup account [@wj25czxj47bu6q:matrix.org](https://matrix.to/#/@wj25czxj47bu6q:matrix.org) may be used instead. _Direct messages should be end‑to‑end encrypted by default in most Matrix clients._ + +Alternatively, please email [tommy@privsec.dev](mailto:tommy@privsec.dev). An OpenPGP key for email encryption will be made available upon request.