Re:Security.txt (2017)
by hartator on Wednesday February 13, 2019 @09:51AM
(#19153479)
Good idea but terrible URL. Web servers by default don’t server hidden folders. Why not just example.com/security.txt instead of example/.well-known/security.txt?
[ Parent
| on HN ]
It's a .well-known way to serve additional metadata for a website.
https://en.wikipedia.org/wiki/List_of_/.well-known/_services...
Better link from stedaniels further in comments: https://ma.ttias.be/well-known-directory-webservers-aka-rfc-...