Hello #HackerOne.

We are deeply disappointed that you have started to require ID verification from hackers who want to submit vulnerability reports to #curl, as this now makes them turn away and we miss out on their reports.

We have not been a bug bounty program since February and we do not intend to go back to bounties. What do we need to do for you to switch us to "just" a Vulnerability Disclosure Program so that you can stop requiring ID from security researchers trying to help us out?