Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CHE regional terms #10

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Add CHE regional terms #10

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e8888b1
added CHE core terms
florian-bbs Apr 10, 2022
19c585b
adapted legal safe harbor to match the original disclose terms as clo…
florian-bbs Apr 10, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions regional/CHE-core-terms.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Introduction

# Expectations

# Ground Rules

# Safe Harbor

When conducting vulnerability research according to this policy, we:

1. will not take civil action or file a complaint with law enforcement authorities against you for accidental, good faith violations of the policy

2. interpret activities that comply with the policy as authorized access under the Swiss Penal Code. This includes Swiss Penal Code paragraphs 143, 143<sup>bis</sup> and 144<sup>bis</sup>.

3. will not file a complaint against you for trying to circumvent the security measures deployed in order to protect the services in-scope according this policy.

If legal action is initiated by a third party against you and you have complied with the policy as outlined in this document, we will take the necessary measures to make it known to the authorities that your actions have been conducted in compliance with this policy.

You are expected, as always, to comply with all applicable laws.

If at any time you have concerns or are uncertain whether your security research is consistent with this policy, please submit a report through one of our Official Channels before going any further.