News for hackers. Stuff that matters.
Re:Security.txt (2017) by pmlnr on Wednesday February 13, 2019 @07:17AM (#19152466)
[email protected]

No need to overcomplicate this.

.well-known is a terrible idea by the way, a <link rel> or <meta> would make much more sense.

Re:Security.txt (2017) by the8472 on Wednesday February 13, 2019 @07:27AM (#19152515)
not everything HTTP serves HTML
Re:Security.txt (2017) by bmn__ on Thursday February 14, 2019 @04:53AM (#19160777)
The `Link` header exists which is the moral equivalent of the `link` element in HTML. That way you can express link relations on resources whose representations do not have hyperlinks. Example:

    HTTP/1.1 200 OK
    Content-Length: 153054
    Content-Type: image/webp
    Link: <http://example.com/mediterranian-2019/olives.webp>;
      rel="next"; title="next image in album"
See https://tools.ietf.org/html/rfc8288
Re:Security.txt (2017) by bmn__ on Thursday February 14, 2019 @04:52AM (#19160773)
<link rel> is for a single resource, .well-known is for a whole site.