From 7991b2b55b54167aea8ffdc294141baa0ebf4a57 Mon Sep 17 00:00:00 2001 From: Diogo Teles Sant'Anna Date: Thu, 7 Sep 2023 18:27:37 -0300 Subject: [PATCH] Update "Security" section of README to also mention the Security Policy I did this because some projects use a README section named "Security" to disclose the same infos that we're disclosing on the Security Policy. After this change they'd be correctly redirected. --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index da7a670..dc3c6ec 100644 --- a/README.md +++ b/README.md @@ -26,6 +26,8 @@ licensed under the [Apache License, version 2.0](https://www.apache.org/licenses Because of how Python internally stores numbers, it is very hard (if not impossible) to make a pure-Python program secure against timing attacks. This library is no exception, so use it with care. See https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/ for more info. +For instructions on how to best report security issues, see our [Security Policy](https://github.com/sybrenstuvel/python-rsa/blob/main/SECURITY.md). + ## Setup of Development Environment ```