Merge PR #547 from 'pinheadmz/security1'

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Supported Versions
+
+Please see [Releases](https://github.com/handshake-org/hsd/releases).
+We recommend using the [most recently released version](https://github.com/handshake-org/hsd/releases/latest).
+
+## Reporting a Vulnerability
+
+To report security issues send an email to a project maintainer below (not for support).
+
+The following keys may be used to communicate sensitive information to developers:
+
+| Name | Email | Fingerprint | Full Key |
+|------|-------|-------------|----------|
+| Christopher Jeffrey (@chjj) | chjjeffrey@gmail.com | B4B1F62DBAC084E333F3A04A8962AB9DE6666BBD | https://keybase.io/chjj |
+| Matthew Zipkin (@pinheadmz) | pinheadmz@gmail.com  | E61773CD6E01040E2F1BD78CE7E2984B6289C93A | https://keybase.io/pinheadmz |
+
+You can also import a key by running the following command with an individual’s fingerprint:
+
+`gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "<fingerprint>"`
+