Responsible Disclosure Policy
Given that:<p>(1) the nature of the suspension was not communicated to Egor at the onset of the situation, nor,<p>(2) noted in the blog post [1] describing how Github "detected the attack",<p>I am inclined to believe that this is a response to the furious reaction to their suspension decision and was not, as this post implies, the game plan from the beginning.<p>It's healthy that they've reversed their suspension but the lack of transparency (not to mention potential dissembling) on the decision process regarding the revocation is still troubling.<p>[1] <a href="https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation" rel="nofollow">https://github.com/blog/1068-public-key-security-vulnerabili...</a>