posted in Selfhosted
For those selfhosting stuff that's publicy accessible, do you serve a security.txt?
en.wikipedia.org/wiki/Security.txt
Reposted from r/selfhosted.
en.wikipedia.orgsecurity.txt - Wikipediaen.wikipedia.orgsecurity.txt - WikipediaReplying to @nawan@scribe.disroot.org
Do people actually contact you with that?
Replying to @majster@lemmy.zip
I have a security.txt with an email to report vulnerabilities and a public key to encrypt sensitive information. The only reports I ever got were on the contract us form, unencrypted.