[openssl-commits] [web] master update

[Rich Salz]

The branch master has been updated
       via  f8a362841bcc696786c5faa1dcfc8d0c274f92e7 (commit)
      from  fd21e3cd9ca7c7b7a8465d47e2bfbb728a4865e2 (commit)


- Log -----------------------------------------------------------------
commit f8a362841bcc696786c5faa1dcfc8d0c274f92e7
Author: Rich Salz <rsalz at akamai.com>
Date:   Wed Apr 18 08:50:48 2018 -0400

    Add bug bounty reference

-----------------------------------------------------------------------

Summary of changes:
 docs/faq-5-misc.txt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/faq-5-misc.txt b/docs/faq-5-misc.txt
index b84b595..f2810e5 100644
--- a/docs/faq-5-misc.txt
+++ b/docs/faq-5-misc.txt
@@ -103,3 +103,13 @@ in the next minor release.
 
 It was decided after the release of OpenSSL 0.9.8y the next version should
 be 0.9.8za then 0.9.8zb and so on.
+
+* Do you have a bug bounty program?
+
+The project does not.  Google runs a program
+@@@https://www.google.com/about/appsecurity/patch-rewards/@@@; so does
+HackerOne, @@@https://hackerone.com/ibb-openssl@@@. In general, if you
+have found a security issue, send email to openssl-security at openssl.org.
+Please note that we do not consider DNS configurations or Website
+configuration to be security issues.
+