Security

Reporting a problem

Report security problems privately through GitHub's private vulnerability reporting for Reflux, not in a public issue. Please include what is affected and how to reproduce it.

Verifying a download

Every Windows and Linux build is published on Reflux's GitHub releases with its SHA-256 checksum and the commit it was built from. Windows builds are not signed with a publisher certificate yet: check the checksum before opening one (see Download).

How Reflux handles your sign-ins

See Privacy, and the project's security policy.