Skip to content

Security: pps-protocol/pps-php

Security

SECURITY.md

Security Policy

PPS-PHP is an experimental implementation of the PulseProof Sentinel Protocol.

It has not been independently audited.

Do not use in production without proper security review.

Reporting a Vulnerability

Please do not open public GitHub issues for security vulnerabilities.

Report privately to:

 pps.protocol@proton.me

Or use GitHub Private Vulnerability Reporting if enabled.

Supported Versions

Version Supported
Latest main branch Yes
Older versions No

Scope

Security reports may cover:

  • cryptographic implementation flaws
  • CBOR parsing vulnerabilities
  • signature verification bypass
  • Trust Code derivation issues
  • timing side-channels
  • key management issues
  • storage backend vulnerabilities

There aren't any published security advisories