ISC has an OpenPGP key. You can learn more about OpenPGP in RFC 2440. OpenPGP is a public key system, which means that if you have our public key and we sign a 
mail message (or a software distribution) using our private key, you can have a moderate confidence level that the message or distribution really did come from 
us.

If you suspect you have found a security defect in BIND or DHCP, or if you wish to inquire about a security issue that you have learned about which has not yet 
been publicly announced, ISC encourages you to get in touch with our Security Officer using the security-officer@isc.org e-mail address.

However, plain-text e-mail is not a secure choice for communications concerning undisclosed security issues so we ask that you please encrypt your communications 
to us using the ISC Security Officer public key found below.