Responsible Disclosure

If you found a security issue in this infrastructure, I want to know about it.
Email [email protected] with the subject "Disclosure". PGP preferred once my key is published.

I ask two things: give me a reasonable window to fix before public disclosure, and do not exfiltrate data beyond what proves the issue.

You get a fix, an honest thank-you if you want one, and zero legal drama.