hsd/SECURITY.md

Cryptocurrency bike-shed

# Security Policy

## Supported Versions

Please see [Releases](https://github.com/handshake-org/hsd/releases).  
We recommend using the [most recently released version](https://github.com/handshake-org/hsd/releases/latest).

## Reporting a Vulnerability

To report security issues send an email to a project maintainer below (not for support).

The following keys may be used to communicate sensitive information to developers:

| Name                                                        | Email                        | Fingerprint                              | Full Key                     |
|-------------------------------------------------------------|------------------------------|------------------------------------------|------------------------------|
| Christopher Jeffrey ([@chjj](https://github.com/chjj))      | chjjeffrey@gmail.com         | B4B1F62DBAC084E333F3A04A8962AB9DE6666BBD | https://keybase.io/chjj      |
| Matthew Zipkin ([@pinheadmz](https://github.com/pinheadmz)) | pinheadmz@gmail.com          | E61773CD6E01040E2F1BD78CE7E2984B6289C93A | https://keybase.io/pinheadmz |
| Nodari Chkuaselidze ([@nodech](https://github.com/nodech))  | nodar.chkuaselidze@gmail.com | D2B2828BD29374D5E9BA3E52CCE677B05CC0FE23 | https://keybase.io/nodech    |

You can also import a key by running the following command with an individual’s fingerprint:

`gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "<fingerprint>"`

To import the full set:
```
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "B4B1F62DBAC084E333F3A04A8962AB9DE6666BBD"
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "E61773CD6E01040E2F1BD78CE7E2984B6289C93A"
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "D2B2828BD29374D5E9BA3E52CCE677B05CC0FE23"
```