The Security team has been revising our various landing pages and content across (what I'm going to call) administrative properties of wikitech, office, meta, mediawiki, even foundation wiki (soon).
I have written a page that outlines the format and strategy around our process at https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Documentation
Three things that are probably fairly modest tasks
- Replace https://www.mediawiki.org/wiki/Security with some version of https://www.mediawiki.org/wiki/User:CPettet_(WMF)/Security
- Add security or report a security issue to https://www.mediawiki.org/wiki/MediaWiki with CE's help
- Add /wiki/Security landing page to foundation.wikimedia.org
I have been working with @CKoerner_WMF and @Quiddity to this point, but I wanted to this officially on the books as I'm not sure how much time this is :) If we could do 1 and 2 soon, and wait on 3 that would be swell.
Later we may move the Password Policy from meta to foundation.wikimedia.org as canonical with the version on meta being marked as 'for translation only' in the same manner as the Privacy Policy. (This item is currently on hold while Security Team coordinates with other teams)