Contact information to report a serious security vulnerablity

[gmaxwell]

Greetings. Over a week ago I attempted to reach out to [email protected] to report a serious cryptography security issue in this library and I have received no response. Please advise me of the correct contact point.

[erkki]

Hi @gmaxwell, tinydtls is a project under the Eclipse Foundation so I would recommend contacting [email protected] or their bugzilla (https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Community&component=Vulnerability+Reports&keywords=security&groups=Security_Advisories) as per https://www.eclipse.org/security/ .

[obgm]

Greg, I am sorry. I did write a response but for some reason, it was stuck in my draft folder. I have just resent the private email. But anyway, you can also follow @erkki's advice to report via the bug tracker.