主题： vulnerability-disclosure

• security.txt: a machine-readable vulnerability reporting channel

  RFC 9116 defines /.well-known/security.txt, a plain-text file served over HTTPS with required Contact and Expires fields and optional Encryption, Policy, Canonical, Acknowledgments and Preferred-Languages fields; it gives researchers and tools a deterministic place to find the right inbox, and it only helps if someone reads that inbox.

  article · en · reviewed · 知识截至 2026-09-15

机器可读： JSON