You must log in or # to comment.
No, because it invites beg bounties and slop reports.
No, it’s free real estate for scams, slop and the like.
Yes, but I should probably also put one up on my other domains
I was gonna say you had it in the wrong place, but it looks like you also serve it in the /.well-known/ location as well.
Nice domain!
Do people actually contact you with that?
I have a security.txt with an email to report vulnerabilities and a public key to encrypt sensitive information. The only reports I ever got were on the contract us form, unencrypted.
Nope.
Why so people ignore that too?
Nope, maybe I should ! Thanks for the reminder !
