# Security Policy

## Supported Versions

Please see [Releases](https://github.com/handshake-org/hsd/releases).
We recommend using the [most recently released version](https://github.com/handshake-org/hsd/releases/latest).

## Reporting a Vulnerability

To report security issues send an email to a project maintainer below (not for support).

The following keys may be used to communicate sensitive information to developers:

| Name | Email | Fingerprint | Full Key |
|------|-------|-------------|----------|
| Christopher Jeffrey (@chjj) | chjjeffrey@gmail.com | B4B1F62DBAC084E333F3A04A8962AB9DE6666BBD | https://keybase.io/chjj |
| Matthew Zipkin (@pinheadmz) | pinheadmz@gmail.com  | E61773CD6E01040E2F1BD78CE7E2984B6289C93A | https://keybase.io/pinheadmz |

You can also import a key by running the following command with an individual’s fingerprint:

`gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys "<fingerprint>"`

