Add /.well-known/security.txt (RFC 9116) #180

Open
opened 2026-05-14 17:31:18 +00:00 by chihlasm · 0 comments
Owner

Add a static security.txt served at /.well-known/security.txt per RFC 9116.

Fields

  • Contact: mailto:security@resolutionflow.com (verify address exists / is monitored)
  • Expires: rolling 12 months
  • Preferred-Languages: en
  • Canonical: https://resolutionflow.com/.well-known/security.txt

Why

Trivial change but signals seriousness to security-conscious buyers.

Acceptance

  • Reachable at https://resolutionflow.com/.well-known/security.txt with Content-Type: text/plain
  • security@resolutionflow.com is a real, monitored inbox before publishing
  • A reminder/process exists to refresh Expires annually
Add a static `security.txt` served at `/.well-known/security.txt` per [RFC 9116](https://www.rfc-editor.org/rfc/rfc9116). ## Fields - `Contact: mailto:security@resolutionflow.com` (verify address exists / is monitored) - `Expires:` rolling 12 months - `Preferred-Languages: en` - `Canonical: https://resolutionflow.com/.well-known/security.txt` ## Why Trivial change but signals seriousness to security-conscious buyers. ## Acceptance - Reachable at `https://resolutionflow.com/.well-known/security.txt` with `Content-Type: text/plain` - `security@resolutionflow.com` is a real, monitored inbox before publishing - A reminder/process exists to refresh `Expires` annually
Sign in to join this conversation.