change main point for reporting. (#39)

Author: monkeyiq

security/index.md

@@ -42,10 +42,15 @@ to learn how to properly report vulnerabilities, as well as to find information
 
 ## Reporting vulnerabilities
 
-In case you find a vulnerability in SimpleSAMLphp, or you want to confirm a possible security issue in the software,
-please get in touch with us through [Sikt's CERT team](https://sikt.no/abuse). Please use our PGP public key
-to encrypt any possible sensitive data that you may need to submit. We will get back to you as soon as possible
-according to our working hours in Central European Time.
+In case you find a vulnerability in SimpleSAMLphp, or you want to
+confirm a possible security issue in the software, please get in touch
+with us through the [github Security
+page](https://github.com/simplesamlphp/simplesamlphp/security) or the
+respective page for one of the core libraries such as
+[saml2](https://github.com/simplesamlphp/saml2/security). We will get
+back to you as soon as possible according to our working hours in
+Central European Time.
+
 
 When reporting a security issue, please add as much information as possible to help us identify, confirm, replicate and
 fix the problem. In particular, remember to include the following information in your report: