News for hackers. Stuff that matters.
Re:Security.txt (2017) by cabaalis on Wednesday February 13, 2019 @08:27AM (#19152840)
Why are dotfiles generally considered "hidden" and not to be served (such as .htaccess, .env, etc) but .well-known is expressly intended to be served? It should have just been named well-known, IMO.
Re:Security.txt (2017) by geofft on Wednesday February 13, 2019 @08:59AM (#19153087)
Because that made it unlikely to collide with existing / claimable uses. Consider https://github.com/well-known or https://instagram.com/well-known .