News for hackers. Stuff that matters.

A comment on Security.txt. Parent comment

Re:Security.txt by politelemon on Sunday March 14, 2021 @02:38PM (#26457619)
Their own security.txt also fails to do this

https://securitytxt.org/.well-known/security.txt

> # If you would like to report a security issue

> # you may report it to us on HackerOne.

> Contact: https://hackerone.com/ed

> Encryption: https://keybase.pub/edoverflow/pgp_key.asc

> Acknowledgements: https://hackerone.com/ed/thanks

[ Parent | on HN ]
Re:Security.txt by nwcs on Sunday March 14, 2021 @03:54PM (#26458374)
This was fixed: https://securitytxt.org/.well-known/security.txt
[ Parent | on HN ]
Re:Security.txt by fakename11 on Sunday March 14, 2021 @07:55PM (#26460856)
I bet these "expired" security.txts will become more common than unexpired ones in the near future. Updating a date every year sounds annoying.
[ Parent | on HN ]
Re:Security.txt by lambda_obrien on Sunday March 14, 2021 @11:40PM (#26462395)
Nah, just write a script to update it every 3 months!
[ Parent | on HN ]