Every claim, labelled: why our security page lists what we don't promise

说明与用途

Vardum 的单页安全声明系统，透明列出承诺与不承诺的内容，并标注限制与标签。

问题

Ensuring transparent and honest security claims for a private messenger.

结果

A transparent, single-page security claims system that clearly states what is promised and what is not, improving developer and user trust.

工作流

• Create a dedicated security claims page.
• Assign each claim an ID and one of four labels: Implemented, New, Verified, not claimed.
• Document limits next to each claim.
• Publish the page at tryvardum.app/claims/.
• Update claims when code changes or audits are completed.

证据

I build Vardum, a private messenger, mostly on my own. Early on I made one rule for the website: every security claim goes on a single page, with its limits next to it, and if any other page disagrees with that one, that page wins.

来源

Each entry has an ID and one of four labels: Implemented, New, Verified, not claimed.

来源

The code is public under AGPL-3.0: github.com/VardumTechnology/Vardum.

来源

If you find a claim the code doesn't back up, tell me at [email protected] and the page changes.

来源