Security Policy / Güvenlik Politikası
Reporting a Vulnerability
If you discover a security vulnerability in Phantom-WG, please report it through the channels below. You can use the PGP key for encrypted communication.
Version
Supported
Phantom-WG Modern (main)
Yes
Phantom-WG Retro (retro)
Maintenance only
Phantom Daemon never exposes a TCP port to the internet
Management access is exclusively through Unix Domain Socket (UDS)
All external access goes through the auth-service proxy layer (JWT)
TLS termination at nginx with TLSv1.2/1.3 only
Docker secrets for all cryptographic material
SQLite databases with WAL mode for crash recovery
Phantom-WG'de bir güvenlik açığı keşfettiyseniz, aşağıdaki kanallar üzerinden bildirebilirsiniz. Şifreli iletişim için PGP anahtarını kullanabilirsiniz.
Sürüm
Desteklenen
Phantom-WG Modern (main)
Evet
Phantom-WG Retro (retro)
Yalnızca bakım
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGiw7e0BEADQJ0agdp2jLL3cd67epuB5kKUOE11O8Owdd7nAem+eBMUWo9NY
XpXuXNo2iGbNJJ9q/erKVmMNtBnIzF8GCqYSHo4XMNBSdjhhkNZtkMhuKvZISyR4
QLET5Hy3U89zUASw+7BCrX3g/9Raw5FQUziIfvE2Oe0JHXw7ACZoEcdfUNFweU+P
74Z14opBeqQoNC9ZfM0TALOLOmaxEjZckfJfe3cO+R8CTZfzNz0ilG2Xuwkmwg3T
lsEeY57ZGl2Yy5pRAFvE9u/mW8zb6Pdd7bmMGWmeFfUymUEGoVoR5k//wMRzDEwT
cfwYjQ0GKquXMPHnkhcWOQzg6Lr5SgBafUkGSP+hofZIPOVR027f98F3kd8mMMOk
L4qGgP3COgtjLxN6fzNcCBtSVCxOueQl8lMU9cZot2FpVZUS4HhQ1Gm139Ia4mdP
MFUeuWDrO71EWmfgsg3vFOyqkIIE212jP92wrwTZVTGVYdD9d7oBiBGX9/Bsdcu8
FPu8RqU99CBUzgbtGrOJ/C7aHl/lGf9aIkGFkzO/GxVXIXkXEq1OtpIVpP6C/sjk
1CgU1zae0nq+Oseze2H/qDj0XmnG72RoBgb8bpxNoOD3m3tioShDeGzTvH8IGkji
K4+2tBVzpM6cUbG/E+4SRAkfBoZozx+dwttSPuVKUkQpnmcf2QGKvrY2LwARAQAB
tCZSxLF6YSBFbXJlIEFSQVMgPHIuZW1yZWFyYXNAcHJvdG9uLm1lPokCVAQTAQgA
PhYhBJ8nFJ0Rs2Uf4nZmjpLHmYm6F9VrBQJosO3tAhsDBQkHhh9ZBQsJCAcCBhUK
CQgLAgQWAgMBAh4BAheAAAoJEJLHmYm6F9Vri6UP/RSXi76/zbEXTkzN/sK9HqwC
TzoCnkj8XuGW2PIJf/Bf2ii4NY+PMulDNq/OkZy0KX65SU5LIfuXqt4HmFmOH/A9
OLK5GB9GvtjCgP0GqG0D0r/NYrHA6mGiYuo83iVnmV0yx+NxqEHdNnLugMH3gYyV
mK0x1IjasazRBX7L2Bcr6xDH02UNvLB//CNjCvkiZ406IJ3rK9FHc7VIjOMtbr7j
PrumIut9oZvra+tKXZUXCuJp8AzV0JkG02CGEtcvnAEKWoj5rs/5Usje2bouA0Oe
he7TCQQTnljHVoERrQr05/jSuX67ByFMWHoZWCdkxTV7qL7xZa2c+Rbu39a8tbNf
aaAMx935S6PR7npVSsh67Wh1AyDhWyOYchTyebPAF/tQNHp0adeckYLVwz7Kirk/
nt9zi3Rm7lyxYNfkQBU3bcaVJiWUG3E3wP/AOEpwwtU/zcGsvjd1Cbxjk5NtvC/8
2SYMLRkuQEfAahBQ/yVUA04Pw20QZSfaQlw07hk0fYo2OMSB/uESBpoUXPPh6dSy
oKyq9DbLziJNZeAFluuvJcqfFVdtaWTj7Q+tT7Zg3VXXyzZLJmwWn9ONmMBEcqLz
vAs0k018+vwIHAUvMon5AwOkY0dq6fVDlEHe4OfoZ177kIG8cONai2fDGQfDEjP+
IOedP7VpzOT2eaZeegvzuQINBGiw7e0BEACekbRwI9y1TOWZ5t0Vu+lLANH35X3V
Acp6OO8hbMF9hmOdw7qXfIHM+bRfXiRhlq+jKC9VyphIdaRhX/boKfilxfa7oSvZ
HxW9eKbyFaKmQLOsJyy4JYp7P9CFUgYTRdxo8HC80GQQ3MASP+7b3DuE32HWNdKT
3A4Mf9A+c1Ve84YU/E7n7ZYA4sinSlNtAeclkuFjo9n8gaEJ8K38LiV25Ye4HkGX
idsifeyv58hGRbMfI6GAWrqyDCVHPMWQUeRzJkbMDzlyfo4UzmE2ouc0xvQAThK1
Ntx1nnsoeusR9D5XJ07HN+wnknjdABMn2lKc4j1CjgS6xuegfYFvffOIbmY0niup
g0KuYG7xPqfxqT1VpAK+mjI7rlnl/sa89h417/74otZo082sdIWWZlrtKFb/HNB8
0VWuQ/b7I+T1fpVofIVzVJbVX3+GBeNZ4qwlkPICM4j/U1EzF65myn9I2XxUYZqL
JXjqOEoJx5EG0K9oqsvHC6GVMoYjbgHQ6ySJLI8PQ6qqCzshrgRTrN67tyZHm/3x
XJmeq83Po56j68oGj9sJzXStL4bMyfsneaUls4ssn/+jzKOsDZDTseeTLn9KNzdf
uM8AA/kO5ZMDjYsfbja7ZwcUC6c41Q+xQtGmsVX0Bm+/enOeyXnxEe5++Awo0z7x
LOpnlMxeHLcDJwARAQABiQI8BBgBCAAmFiEEnycUnRGzZR/idmaOkseZiboX1WsF
Amiw7e0CGwwFCQeGH1kACgkQkseZiboX1WvynhAAxK+JKEGNf8tysBEf9sDHpU9/
WqRyE6ULJvDT4nGGDJlBPDCQ2wS6bEgitFa6jFGVEGhIQY5VquEPgYkl4VEuTvQg
sziqTDlkbSJD0mCVudicSkm220l3MNKO1Hmynjzvae3GhClpxu/xH9S/KB9ELf8j
Xe00ALotxPSh2kKWPlufg96//OmNSCRAnzgDvbcCF4E0J1o1pr3LNdaqRCjhH71m
D6gawDWo9e8mEVHPDxW4kYsVNN8xhmR467J9uH5G9g1qPq3WnUpYjTzOjEsw+W88
PtlqktjLYMuRQ7pc8RjdEg3989FKKMM3J2sHuCxa3EZvs6GzLexTZ9vx3H+SqW5M
Hw+tZJq5U4DWvYKnXwoZdr56IeB67hJFAdQiu1AZDHV6yLLLHST5SEGIXeuvMGlv
6XX8X7CNvA/D6o+2YnMYtj5FizXO2vXiIU67/3w4AaeilF6XC8sQnQx/3rfW0UO0
DmQMz8xQKK9R94PHNAKtYglBd3Wx/WGqLnIknGFRG9V1M/STJV7AfXE711AGABf/
vxOdMxe+xiu/azWYVdjkBlhVWwWp/gC69M8+NQNBbD//WuPpXeJ9I4h1YNma+HdH
1P5YefVHYYDuIySjVvuoadLaxbZ4WKmKkQoaSFY3H7NxkGmc4ZJViCf1fe/KAjKe
S98vFLEMVlrYF0QaZME=
=q4Gv
-----END PGP PUBLIC KEY BLOCK-----