Did you find a security-related issue in one of our products? We'd like to guideline you through the process from the first contact till the public announcement of a security fix.
Thank you for taking time reading the following information carefully. Your contribution is highly welcome!
This security policy is related to i-doit incl. all its sub-projects and public systems.
Please ensure that your findings affect the latest stable release of our software application. If you find any security issues in an older version of our software application please make sure it has not been already fixed in the current version.
i-doit is maintained by the synetics GmbH, located in Düsseldorf/Germany. You can contact us in both English and German.
These are examples for security-related issues:
- Vulnerability in one of our public systems, e.g. our websites
- Vulnerability in one of our software applications, e.g. i-doit
- Disclosure of private information, e.g. user data and secrets
These issues affect the availability, confidentiality and/or integrity of our systems, software applications and the data we must protect.
We encourage you to follow the principles of a responsible disclosure. In short, we kindly ask you to:
- Inform us immediately after you found an issue
- Do not publish your findings without our confirmation
- Give us at least 4 weeks to fix the issue if your findings are confirmed as security-related
- Publish your findings after we publicly announce security fixes
A CVE is very much appreciated.
Contact us directly via e-mail: security@i-doit.com
We highly recommend to sign and encrypt your e-mail with GPG/OpenPGP. Our public key has the ID…
2B8743963F92B9BF
…with the fingerprint:
0D93 1727 99E4 2506 691A 824E F452 EA4A 2501 DB6E
Download and import our public key which is also available on most key servers:
-----BEGIN PGP PUBLIC KEY BLOCK-----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=r5p7
-----END PGP PUBLIC KEY BLOCK-----