SECURITY SUBMISSIONS Our security point of contact is configured to accept PGP encrypted messages for submission of information regarding security vulnerabilities discovered in the RDK platform. Please encrypt your message using the following key:
Public Key
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGk8Cx4BEADcqfNEQxu2yrYGpUsw5n1ivG7Z/akEOkgkVzM7BNZq+Wi61b7K
http://openpgp.org/.
Send encrypted message to codesecurity@rdkcentral.com , be sure to attach your public key to allow a secure response.
6 Comments
Mark Bomley
Dec 11, 2025That key expired in 2021 and gpg won't let me encrypt messages to it. Is there a new key? Where am I supposed to send security vulnerabilities in the RDK codebase? I've tried sending to security@rdkcentral.com but I haven't receive any response.
Sudhakar Pallela
Dec 11, 2025Hi Mark Bomley
Please reach out to RDK Central support support@rdkcentral.com.
Sudhakar Pallela
Dec 12, 2025Hi Mark Bomley
We generated new public key updated. Can you try to encrypt message and sent to email.
Mark Bomley
Dec 12, 2025The new key works thanks. So should I send to security@ or codesecurity@ or support@?
Sudhakar Pallela
Dec 13, 2025Hi Mark Bomley Thank you for the confirmation. Yes, You can send to security@rdkcentral.com
Mark Bomley
Dec 16, 2025I think my emails might be getting caught by a spam filter. Sorry to be a bother, but are you able to confirm if security@rdkcentral.com has received any of my reports? My email is chalkcode@protonmail.com. I sent a report in July without encryption and then a couple other reports in the last week with the new PGP key and I haven't heard anything back.