securedrop.org should have "How To Submit" in the FAQ

[heartsucker]

Description

A source may end up on securedrop.org and want to know how to submit docs, and the FAQ should clarify that.

User Research Evidence

A UX team emulated source behavior and made this suggestion.

User Stories

As a source, I want to find the instructions on how to safely submit docs in as many places as possible.

[bumbleblue]

In general, I think the website/documentation should be organized in paths for

• Sources
• Journalists
• Orgs
• Admins

Thinking about what information these groups of people need, and in what order, could improve the onboarding process. I'm sure @ninavizz has thought about this, too!

[ninavizz]

Now that sd.org is open-sourced, might @conorsch be able to move this over to that repo? 😸

[juodumas]

I was checking out SecureDrop with the prior knowledge that it is a secure document sharing platform for sources. With this point of view I have landed on securedrop.org and was surprised that it's main target is organizations. Below some thoughts about this.

1. The website hero has a button "Get SecureDrop at your organization", which leads to a separate page for organizations. But there is no equivalent button for sources. Suggestion: just add a button for sources, which leads to the directory:

current	suggestion

2. Even though the main page has a section called "Share documents securely with these organizations" and a button "See all SecureDrop instances in the directory", after opening the directory page you get instructions for organizations only and nothing for sources in the page header and sidebar. Suggestion: add a small section for sources:

current	suggestion

3. Per original report, the FAQ has a "Getting SecureDrop at Your Organization" question, but nothing for sources.

4. The docs have very clear paths and great (even if quite technical) instructions for sources and journalists. The main website should too!

I also suggest to rename this issue. I think it's about the organization-centric PoV of securedrop.org and not only the FAQ.