Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:116317
Message-ID: <00de1e50-8b83-4c4f-24f7-5837a8f0d2f8@beccati.com>
Date: Wed, 10 Nov 2021 21:17:21 +0100
MIME-Version: 1.0
Content-Language: en-GB
To: Niklas Keller <me@kelunik.com>, Nikita Popov <nikita.ppv@gmail.com>
Cc: PHP internals <internals@lists.php.net>
References: <CAF+90c90pTtjxuMaQ88h+njhByfbv4qs=xx72CVPSw40tde6Cg@mail.gmail.com>
 <CANUQDCg-DFmkt2zF25emWnYssSvpcU4RU6vQ=EdLG4hOk3a9cQ@mail.gmail.com>
In-Reply-To: <CANUQDCg-DFmkt2zF25emWnYssSvpcU4RU6vQ=EdLG4hOk3a9cQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] [RFC] Migrating to GitHub issues
From: php@beccati.com (Matteo Beccati)

On 10/11/2021 19:23, Niklas Keller wrote:
> Hey Nikita,
> 
> I'd like to propose using HackerOne instead of bugs.php.net for security
> issues: https://www.hackerone.com/company/open-source-community

As both GH and HackerOne user since years now, I can say h1 has actually 
a better user experience for security reports than GH issues for bug 
reports.

So if we ever move from bugs.php.net to GH I would favour HackerOne for 
the security side of things.


Cheers
-- 
Matteo Beccati

Development & Consulting - http://www.beccati.com/