4 ms·Security Disclosure Policy Best Practices15 points by Titanous 14y agodfc 14y agoThe CEO of apple/oracle/mozilla/acme should not get a copy of every message sent to security@.