Merge e7f104a into 7bd8457

README.md

@@ -30,13 +30,6 @@ This is an overview of this README:
 Don't forget that the cothority is part of a [bigger
 environment](https://github.com/dedis/doc/tree/master/README.md).
 
-## Disclaimer
-
-The software in this repository is highly experimental and under heavy
-development. Do not use it for anything security-critical yet.
-
-**All usage is at your own risk**!
-
 ## Versioning and Roadmap
 
 We started to work on a 6-monthly cycle, synched up with the semesters at EPFL. From
@@ -274,6 +267,16 @@ Feel free to contact us on our
 [mailing list](https://groups.google.com/forum/#!forum/cothority) or by
 [email](mailto:dedis@epfl.ch).
 
+## Reporting security problems
+
+This library is offered as-is, and without a guarantee. It will need an
+independent security review before it should be considered ready for use in
+security-critical applications. If you integrate Cothority into your application it
+is YOUR RESPONSIBILITY to arrange for that audit.
+
+If you notice a possible security problem, please report it
+to dedis-security@epfl.ch.
+
 # Who is using our code?
 
 This is a list of people outside of DEDIS who is using our codebase for research
@@ -283,5 +286,4 @@ have listed here, please contact us at [dedis@epfl.ch](mailto:dedis@epfl.ch).
 - [Unlynx](https://github.com/lca1/unlynx) - A decentralized privacy-preserving data sharing tool
 - [Medco](https://github.com/lca1/medco) - Privacy preserving medical data sharing
 - [ByzGen](http://byzgen.com/) - Tracking and secure storage of digital and hard assets
-- [PDCi2b2](https://github.com/JLRgithub/PDCi2b2) - Private Data Characterization for
-- [i2b2](https://www.i2b2.org/)
+- [PDCi2b2](https://github.com/JLRgithub/PDCi2b2) - Private Data Characterization for [i2b2](https://www.i2b2.org/)