Andrew David Wong 7815f4a7bd

Improve guidelines for verifying Qubes repos ...

- Generalize section from "code" to "repos" (We also have doc repos.)
- Clarify tag and commit signing
- Warn against adding commits on top of unsigned commits
- Warn against trusting GitHub's interface for signature verification

Closes QubesOS/qubes-issues#3962

2018-06-07 01:16:24 -05:00

..

canaries.md

Add Canary 15

2018-03-15 19:38:03 -05:00

canary-template.md

Reorganize security info pages

2017-03-18 19:31:12 -07:00

security-bulletins-checklist.md

Update links from /mailing-lists/ to /support/

2018-04-02 03:49:03 -05:00

security-bulletins-template.md

Add QSB 32; minor update to QSB template

2017-08-15 08:27:34 -05:00

security-bulletins.md

Add XSA number to QSB 40's title

2018-05-23 21:33:57 -05:00

security-goals.md

Insignificantly edit security-goals.md

2017-04-16 14:11:04 -07:00

security-pack.md

reinstate 'somehow'

2017-05-25 17:10:17 +10:00

security.md

Clarify language, improve links, and clean up source

2018-01-31 22:40:01 -06:00

verifying-signatures.md

Improve guidelines for verifying Qubes repos

2018-06-07 01:16:24 -05:00

xsa.md

Add notes regarding embargoed XSAs and unused XSA numbers

2017-03-21 18:02:03 -07:00