Responsible Disclosure Policy
Given that:(1) the nature of the suspension was not communicated to Egor at the onset of the situation, nor,(2) noted in the blog post [1] describing how Github "detected the attack",I am inclined to believe that this is a response to the furious reaction to their suspension decision and was not, as this post implies, the game plan from the beginning.It's healthy that they've reversed their suspension but the lack of transparency (not to mention potential dissembling) on the decision process regarding the revocation is still troubling.[1] https://github.com/blog/1068-public-key-security-vulnerabili...