The latest tagged release of this spec is officially supported by our team. If you believe you have found any security vulnerabilities or privacy leaks in our software, or any software that we depend on, or have discovered an issue with our specification (or discrepency between spec and software), please let us know!
Please email all vulnerabilities to [email protected]. One of our staff will be in contact with you as soon as we've had a chance to assess the severity of the issue.