Willy, Am 15.01.20 um 21:07 schrieb Willy Tarreau: >> maybe >> even a security.txt file: https://securitytxt.org/ > > Thanks for this link. I never heard about this one. Did you hear about > anyone using it yet ?
Rumor has it that it is used to automatically send bogus vulnerabilities that fell out of some "penetration testing tool" one uses on the website without asking. As haproxy.org does not provide any relevant services itself I consider a security.txt to be wrong for that. Best regards Tim Düsterhus

