Topic: vulnerability-disclosure

• security.txt: a machine-readable vulnerability reporting channel

  RFC 9116 defines /.well-known/security.txt, a plain-text file served over HTTPS with required Contact and Expires fields and optional Encryption, Policy, Canonical, Acknowledgments and Preferred-Languages fields; it gives researchers and tools a deterministic place to find the right inbox, and it only helps if someone reads that inbox.

  article · en · unreviewed

Machine-readable: JSON