[aerogear-dev] Security Policy on AeroGear

Good morning peeps. I had some conversation with Matthias about the encourage the usage of SSL into Unified Push server, after some minutes thinking would be better if we could make it no only for AGPUSH. So here is the whole and simple idea: - Include a Security Policy on AeroGear site. Ex: http://emberjs.com/security/ or http://www.ovirt.org/Security (David Jorm pointed me out for that) I already got in touch with security response team from Red Hat - Create an alias security(a)aerogear.org which redirects to our incident response team on Red Hat - Make things crystal clear into our projects via SECURITY.md file Ex: https://github.com/andyet/andbang.js/blob/master/SECURITY.md And also include recommendations to make use of SSL with HSTS. Once it affects the whole project, your feedback is welcome. -- abstractj