News for hackers. Stuff that matters.
Re:Security.txt file now mandatory for Dutch government webs... by moffkalast on Thursday June 01, 2023 @08:31AM (#36150220)
Ironically, that information is apparently not well known.
Re:Security.txt file now mandatory for Dutch government webs... by archerx on Thursday June 01, 2023 @08:35AM (#36150242)
It's "well known" if you've manually set up SSL certs for a site using certbot. But yea I agree it's a weird choice to put it there instead of the same place as humans.txt, robots.txt and etc.
Re:Security.txt file now mandatory for Dutch government webs... by onlypositive on Thursday June 01, 2023 @08:38AM (#36150282)
I wasn't going to add one but I might actually put one in my root just out of spite.

Devs need to stop demanding other devs jump through pointless hoops.

Re:Security.txt file now mandatory for Dutch government webs... by withinboredom on Thursday June 01, 2023 @09:32AM (#36150801)
On linux, there is a ~/.config directory, yet devs who think they know everything still pointlessly litter my home directory...

Don't litter you web root either ;)

Re:Security.txt file now mandatory for Dutch government webs... by _nalply on Thursday June 01, 2023 @09:09AM (#36150556)
Au contraire, it's the other way around. It makes more sense to put favicon.ico, robots.txt and humans.txt in .well-known, but that's life, these files are legacy. (shrugs)
Re:Security.txt file now mandatory for Dutch government webs... by xp84 on Thursday June 01, 2023 @09:15AM (#36150621)
Iirc “they” decided that all new standards for “specific URLs you may want to serve for a particular purpose” will be under /.well-known. Robots is grandfathered because it’s super old and established and thus crazy to move. There won’t be anymore “at the root” standards.
Re:Security.txt file now mandatory for Dutch government webs... by jl6 on Thursday June 01, 2023 @09:20AM (#36150673)
I do get why they standardized it that way, but boy is it ugly.