Hello everyone,
We noticed discuss.istio.io incorrectly flagged an email sent to our private disclosure channel as spam and we do not want to miss any vulnerability reports, so we have switched our private disclosure list from the discuss channel to the istio-security-vulnerability-reports@googlegroups.com google group.
https://istio.io/about/security-vulnerabilities/ has also been updated with the new address.
Please send future responsible disclosures and vulnerability reports to that address.
Thanks,
Josh