Add a news item about the LINUX Unplugged podcast.

[wiki] / contact.mdwn

diff --git a/contact.mdwn b/contact.mdwn
index 47c6722..5ba929c 100644 (file)
--- a/contact.mdwn
+++ b/contact.mdwn
@@ -11,15 +11,15 @@ private. You will get a response faster this way.
 
 If you wish to contact us in private you can do so via the
 following addresses. Note that we use
 
 If you wish to contact us in private you can do so via the
 following addresses. Note that we use

-[GnuPG](http://www.gnupg.org/), our emails are (almost) always
+[GnuPG](https://www.gnupg.org/), our emails are (almost) always

 signed. This will also allow you to send us encrypted emails.
 
 - Guus Sliepen <guus@tinc-vpn.org>
 
 ### On IRC
 
 signed. This will also allow you to send us encrypted emails.
 
 - Guus Sliepen <guus@tinc-vpn.org>
 
 ### On IRC
 

-There is a channel on the [FreeNode](http://www.freenode.net/) and
-[OFTC](http://www.oftc.net/) IRC networks. Connect to
+There is a channel on the [FreeNode](https://www.freenode.net/) and
+[OFTC](https://www.oftc.net/) IRC networks. Connect to

 [irc.freenode.net](irc://irc.freenode.net/#tinc)
 or [irc.oftc.net](irc://irc.oftc.net/#tinc) and join channel `#tinc`.
 We are logged in most of the time, but may not be active. If you
 [irc.freenode.net](irc://irc.freenode.net/#tinc)
 or [irc.oftc.net](irc://irc.oftc.net/#tinc) and join channel `#tinc`.
 We are logged in most of the time, but may not be active. If you


@@ -27,3 +27,9 @@ run your IRC client in screen just like us, just ask your question
 and wait. If you cannot stay on IRC and really want to ask a
 question, please do so via email, see above.
 A history of the channel is available on request.
 and wait. If you cannot stay on IRC and really want to ask a
 question, please do so via email, see above.
 A history of the channel is available on request.

+
+### Reporting security issues
+
+In case you have found a security issue in tinc, please report it via email
+to Guus Sliepen <guus@tinc-vpn.org>, preferrably PGP encrypted.
+We will then try to get a CVE number assigned, and coordinate a bugfix release with major Linux distributions.