SECURITY: how to join the curl-security list

diff --git a/docs/SECURITY b/docs/SECURITY
index c850f270295bff5d02b20194514cb46ac8b6a4e5..e49fa0c2d6f76062e60cab3647b16ab866e8ec88 100644 (file)
--- a/docs/SECURITY
+++ b/docs/SECURITY
@@ -89,3 +89,15 @@ announcement.
   mentioned.
 
 [1] = http://oss-security.openwall.org/wiki/mailing-lists/distros
+
+CURL-SECURITY (at haxx dot se)
+
+Who is on this list? There are a couple of criteria you must meet, and then we
+might ask you to join the list or we can ask you to join it. It really isn't
+very formal. We basically only require that you have a long-term presence in
+the curl project and you have shown an understanding for the project and its
+way of working. You must've been around for a good while and you should have
+no plans in vanishing in the near future.
+
+We do not make the list of partipants public mostly because it tends to vary
+somewhat over time and a list somewhere will only risk getting outdated.