Skip to content

Commit

Permalink
Merge pull request #1986 from rust-lang/revert-1975-crate-security
Browse files Browse the repository at this point in the history
Revert "Add content about ecosystem security help for crate authors"
  • Loading branch information
Manishearth committed Jun 3, 2024
2 parents 3736c6c + 34455e0 commit 78303ff
Show file tree
Hide file tree
Showing 3 changed files with 0 additions and 28 deletions.
5 changes: 0 additions & 5 deletions locales/core.ftl
Original file line number Diff line number Diff line change
Expand Up @@ -24,8 +24,3 @@
<a href="mailto:rustlang-security-announcements+subscribe@googlegroups.com">rustlang-security-announcements+subscribe@googlegroups.com</a>
-distros-openwall-email-anchor =
<a href="https://oss-security.openwall.org/wiki/mailing-lists/distros" lang="en-US">distros@openwall</a>
## Security initiative links
-foundation-security-initiative-href =
https://foundation.rust-lang.org/tags/security%20initiative/
-contact-at-rustfoundation-org-anchor = { EMAIL("contact@rustfoundation.org") }
13 changes: 0 additions & 13 deletions locales/en-US/security.ftl
Original file line number Diff line number Diff line change
Expand Up @@ -39,17 +39,4 @@ security-receiving-description =
<p>The best way to receive all the security announcements is to subscribe to the <a href="{ -rust-security-announcements-mailing-list-href }">Rust security announcements mailing list</a> (alternatively by sending an email to { -rustlang-security-announcements-subscribe-anchor }). The mailing list is very low traffic, and it receives the public notifications the moment the embargo is lifted.</p>
<p>We will announce vulnerabilities 72 hours before the embargo is lifted to { -distros-openwall-email-anchor }, so that Linux distributions can update their packages.</p>
security-crates-heading = Ecosystem security help for crate authors
security-crates-description =
<p>Security is a value important to the Rust ecosystem as a whole, not just to the Rust language. If you are a crate author and you have received a high impact/severity security bug report for your crate, the Rust Foundation and the Rust Project are available to help manage the situation. The Rust Project or the Rust Foundation may also be the ones reaching out to you, if they have been informed of a security issue.</p>
<p>As part of its <a href="{ -foundation-security-initiative-href }">Security Initiative</a>, the Rust Foundation:</p>
<ul>
<li>Employs security engineers who can help assessing the problem, developing mitigations, and estimating impact.</li>
<li>Has a network of member organizations that can help with testing resources and also employ security experts who can help with assessing and fixing issues.</li>
<li>Employs communications staff who can manage publishing notifications and fielding inquiries.</li>
<li>Has contacts with government agencies tasked with cybersecurity protections who may have information on exploitation or impact of a security problem.</li>
</ul>
<p>The Rust Project can coordinate actions among other parts of the ecosystem that may need to be updated to address a fix.</p>
<p>Please reach out to { -contact-at-rustfoundation-org-anchor } if either the Rust Project or the Rust Foundation can help you by providing security support in the areas listed above or in another way! These are just a few examples of the kind of help available to crate authors facing security challenges.</p>
security-pgp-key-heading = Plaintext PGP key
10 changes: 0 additions & 10 deletions templates/policies/security.html.hbs
Original file line number Diff line number Diff line change
Expand Up @@ -50,16 +50,6 @@
</div>
</section>

<section id="crates" class="purple">
<div class="w-100 mw-none ph3 mw8-m mw9-l center f3">
<header>
<h2>{{fluent "security-crates-heading"}}</h2>
<div class="highlight"></div>
</header>
{{fluent "security-crates-description"}}
</div>
</section>

<section id="security-pgp-key" class="red">
<div class="w-100 mw-none ph3 mw8-m mw9-l center f3">
<header>
Expand Down

0 comments on commit 78303ff

Please sign in to comment.