News for hackers. Stuff that matters.
Re:The “security.txt” proposal reached last step in the IETF... by DyslexicAtheist on Wednesday December 11, 2019 @06:11PM (#21767789)
there is a draft (from November 27, 2019) that makes the presence of a disclosure policy (using security.txt) mandatory on gov domains:

"Binding Operational Directive 20-01 Develop and Publish a Vulnerability Disclosure Policy" https://cyber.dhs.gov/bod/20-01/

> Create a security.txt15 file at the “/.well-known/” path16 of the agency’s primary .gov domain. This file must include the Policy and Contact fields, as specified in the Internet-Draft.17

There are no comments on this comment yet.