Exactly, their statement has been made in October already: <a href="https:&#x2F;&#x2F;letsencrypt.org&#x2F;2015&#x2F;10&#x2F;29&#x2F;phishing-and-malware.html" rel="nofollow">https:&#x2F;&#x2F;letsencrypt.org&#x2F;2015&#x2F;10&#x2F;29&#x2F;phishing-and-malware.html</a><p>That statement did not contain anything on other kinds of reports. They do have an email address for reporting certificate abuse. So far, I have not been able to find any public statements on how they will handle that.