TDFby DOSAYGOReport an issue

Security

Handle archives like
the data inside them.

A TDF can contain sensitive captured content. Store, inspect, and share it with the same care you would give the original browser session.

Report a vulnerability

Email support@dosaygo.com with the subject “Newdn security report.” Please do not publish an unpatched vulnerability or attach a private TDF to a public issue.

What to include

  • Affected Newdn version and operating system.
  • Whether the issue affects Grower, Player, the archive format, licensing, an installer, or the website.
  • Clear reproduction steps, expected behavior, and observed behavior.
  • Minimum proof-of-concept material needed to reproduce the issue.
  • Logs with tokens, cookies, URLs, personal data, and captured bodies removed.

Archive handling

Do not email an authenticated or private TDF unless support explicitly requests it and agrees on a secure transfer method. Create a minimal synthetic reproduction whenever possible.

Optional archive encryption protects a file at rest and in transit. Once decrypted or opened, the recipient can access the contained data.

Verify releases

Download stable artifacts from the TDF site or the public release mirror. Verify the archive against SHA256SUMS.txt before manual installation.