On Wed, Jan 15, 2020 at 12:20:08PM -0800, LCF wrote: > On Wed, Jan 15, 2020 at 12:07 PM Willy Tarreau <[email protected]> wrote: > > > > maybe > > > even a security.txt file: https://securitytxt.org/ > > > > Thanks for this link. I never heard about this one. Did you hear about > > anyone using it yet ? > > > > Some examples: > https://www.dropbox.com/.well-known/security.txt > https://www.google.com/.well-known/security.txt > https://www.facebook.com/.well-known/security.txt
OK for those publishing it, but anyone looking there for a contact ? I mean, when someone cannot just "git log" or "git blame" in an opensource project to figure the people who touched the same area recently, I doubt they'll ever know about this :-/ And the ones above are mainly made to report issues to the sites hosters/companies but not to their opensource projects it seems. Willy
