News for hackers. Stuff that matters.

A comment on Security.txt (2017). Parent comment

Re:Security.txt (2017) by amaccuish on Wednesday February 13, 2019 @07:30AM (#19152528)
FYI .htaccess shouldn't generally be publically readable, as it's for your webserver, not the public. It's also only relevant to the directory it's in, hence why it's not in a separate directory.
[ Parent | on HN ]
Re:Security.txt (2017) by cabaalis on Wednesday February 13, 2019 @08:27AM (#19152840)
Why are dotfiles generally considered "hidden" and not to be served (such as .htaccess, .env, etc) but .well-known is expressly intended to be served? It should have just been named well-known, IMO.
[ Parent | on HN ]
Re:Security.txt (2017) by geofft on Wednesday February 13, 2019 @08:59AM (#19153087)
Because that made it unlikely to collide with existing / claimable uses. Consider https://github.com/well-known or https://instagram.com/well-known .
[ Parent | on HN ]
Re:Security.txt (2017) by system2 on Wednesday February 13, 2019 @07:49AM (#19152620)
nginx is your friend.
[ Parent | on HN ]