Security.txt is a relatively new standard that helps security reseachers report vulnerabilities in your website or IT systems. This makes the internet more secure for everyone.

@SIDN has published a new information page in English on security.txt: https://www.sidn.nl/en/modern-internet-standards/security-txt

Want to know if security.txt is set up correctly on your website? Test it on https://Internet.nl!

#securitytxt #security #responsibledisclosure #internetstandards

#securitytxt is trying to solve the problem of "who do I tell that this library is insecure" which is adjacent to what I keep wondering "who has published this package" I think, "well, the build server with a short lived credential" is a pretty vacuous answer.

https://securitytxt.org/

Driver du en websajt på en .se domän, se till att du har en security.txt tillgänglig.

https://www.securitytxt.se/

#securitytxt #sverige #sweden #dotse

RE: https://mastodon.nl/@SIDN/116317873852576082

Security.txt is een relatief nieuwe standaard, die beveiligingsonderzoekers helpt om kwetsbaarheden te melden. Dit draagt bij aan een veiliger internet.

@SIDN heeft haar informatiepagina over deze standaard bijgewerkt: https://www.sidn.nl/moderne-internetstandaarden/security-txt Binnenkort verschijnt ook een Engelse vertaling.

Wil je weten of security.txt op jouw website correct is ingesteld? Test het op https://Internet.nl!

#securitytxt #internetstandards #security #responsibledisclosure

🔒 𝗚𝗲𝗲𝗳 𝗱𝗲 𝗯𝗲𝘃𝗲𝗶𝗹𝗶𝗴𝗶𝗻𝗴 𝘃𝗮𝗻 𝗷𝗲 𝘀𝗶𝘁𝗲 𝗲𝗲𝗻 𝗯𝗼𝗼𝘀𝘁 𝗲𝗻 𝗺𝗮𝗮𝗸 𝗵𝗲𝘁 𝘃𝗼𝗼𝗿 𝗺𝗲𝗹𝗱𝗲𝗿𝘀 𝗺𝗮𝗸𝗸𝗲𝗹𝗶𝗷𝗸 𝗼𝗺 𝗯𝗲𝘃𝗲𝗶𝗹𝗶𝗴𝗶𝗻𝗴𝘀𝗽𝗿𝗼𝗯𝗹𝗲𝗺𝗲𝗻 𝘁𝗲 𝗺𝗲𝗹𝗱𝗲𝗻! Gebruik hiervoor het security TXT. Lees de uitleg hierover👉 https://sidn.nl/moderne-internetstandaarden/security-txt

#sidn #securitytxt #faq #security

We will ban you and ridicule you in public if you waste our time on crap reports

https://curl.se/.well-known/security.txt

#HackerNews #banwastefulreports #ridiculeintime #publicshaming #securitytxt #curl

How do #Finnish organizations instruct #security #vulnerability #disclosure using #securitytxt? Many organizations, such as CISA, and the French government, endorse the use of security.txt.

❌ = Not available
❕ = Available but flaws
✅ = Available and conforms #RFC9116

dvv.fi: ❌
eduskunta.fi: ❌
elisa.fi: ❕Missing date (RFC violation)
hel.fi: ❌
op.fi: ❌
puolustusvoimat.fi: ❌
kanta.fi: ❕Date against recommendation
suomi.fi: ❌
traficom.fi: ✅
yle.fi: ❕Date against recommendation

#Suomi #tietoturva

Neu im Forum:

Security.txt

https://t3forum.net/d/1017-securitytxt

#t3academyforum #SecurityTxt #TYPO3Security