On Thu, Jan 16, 2020 at 12:49:40PM +0100, Tim Düsterhus wrote: > Willy, > > Am 15.01.20 um 21:07 schrieb Willy Tarreau: > >> maybe > >> even a security.txt file: https://securitytxt.org/ > > > > Thanks for this link. I never heard about this one. Did you hear about > > anyone using it yet ? > > Rumor has it that it is used to automatically send bogus vulnerabilities > that fell out of some "penetration testing tool" one uses on the website > without asking.
Not surprizing indeed, even almost expected :-) > As haproxy.org does not provide any relevant services > itself I consider a security.txt to be wrong for that. That was may understanding as well. Thanks, Willy
