Trust & security
Trust & security
Security and privacy are part of what I do, so I hold my own site and products to the same standard. If you believe you've found a vulnerability, I want to hear from you.
Responsible disclosure
Report what you found to me privately and give me reasonable time to fix it before any public disclosure. Please don't access or modify data that isn't yours, degrade the service, or use social engineering. Act in good faith and I will too: I won't pursue legal action against research conducted under this policy.
What to include
A clear description, the steps to reproduce, and the impact. Proof-of-concept code or screenshots help me triage faster.
How to reach me
Email me and I'll acknowledge your report as soon as I can. A dedicated security address and PGP key will be listed here as the practice matures.