Problem:

The encrypted email pointed out to me in clear terms that there was information available publicly on the curl web site about the security vulnerabilities that we intended to announce in association with the next curl release, on March 21.

Solution:

know how to use git correctly

Keeping time delayed secrets secret is hard.

source: L