News for hackers. Stuff that matters.

A comment on Security.txt. Parent comment

Re:Security.txt by enw on Sunday March 14, 2021 @02:31PM (#26457554)
In fact I think requiring an expiry date is a huge negative of the spec and will likely hinder adoption.

An expiry date brings along with it yet another maintenance burden for questionable benefit.

[ Parent | on HN ]
Re:Security.txt by ylyn on Sunday March 14, 2021 @02:37PM (#26457609)
Well, the spec only recommends that the date be no further than a year into the future.

So if you really don't want the burden, just set a date in the year 9999 or something.

[ Parent | on HN ]
Re:Security.txt by jensenbox on Sunday March 14, 2021 @04:59PM (#26459115)
It would be way better to not have to "game" the value there if it is going to be garbage data.
[ Parent | on HN ]
Re:Security.txt by waheoo on Sunday March 14, 2021 @06:18PM (#26459951)
Forcing work arounds in implementations so your spec is simpler is the epitome of why standards and specs fail so much.

Design is hard. Good design makes implementation simple.

[ Parent | on HN ]