Reporting a problem with this site
To report a vulnerability in BDVDB itself, use the report form or the contact in our security.txt file.
Our public key
Reports are encrypted with the key published at pgp-key.asc.
- Fingerprint: [EDIT: full key fingerprint]
- Valid until: [EDIT: expiry date]
- Key rotation: [EDIT: how and when a replacement key is announced]
Compare the fingerprint with one published elsewhere, such as the project repository, before trusting a downloaded key.
Sending encrypted email
If you cannot use the form, encrypt your message with the key above and send it to [EDIT: security email address].
How the report form protects you
The form runs OpenPGP.js in your browser and encrypts your whole report, including your email address, before anything is sent. The form provider stores only the encrypted text. If encryption fails for any reason, the form does not send anything.
The encryption code is served from this website, so you are trusting this website when you use the form. If your situation is high risk, use your own PGP software instead.