add third party email reporting alias to hackerone

[vdeturckheim]

As decided in https://github.com/nodejs/security-wg/blob/master/meetings/2017-11-02.md#actions we would like to set up an email alias for reporting vulnerabilities in third party modules to our HackerOne organization.

[reedloden]

@mhdawson I believe this is ready to be landed and provisioned so that @vdeturckheim can continue. :)

[mhdawson]

Landed as 953cb6e

[mhdawson]

Updated email server, should be active now.

[reedloden]

@mhdawson I just tested it. security-ecosystem@nodejs.org returned an "address not found" error. However, security-ecosystem@iojs.org works fine. So, how do we get the nodejs.org address to work?

[vdeturckheim]

I retried it too, seems that security-ecosystem@nodejs.org is still not working, should I update something in this repo @mhdawson ?

[rvagg]

To get a @nodejs.org email to work we need to get the Linux Foundation to add it as a redirect. I'll go ahead and do that.

[vdeturckheim]

Thanks a lot @rvagg

[rvagg]

Got it, I've sent a test email to the alias and have asked recipients to 👍 this comment if they get it.

[reedloden]

Thanks, @rvagg! I can confirm it works, and I've finished the set up for it on the HackerOne side.

[vdeturckheim]

Awesome, thanks @rvagg !