3 ms·
Funny thing that you mention it here as one of the authors of security.txt found this exact issue on several sites: https://edoverflow.com/2018/logic-flaws-in-w
by Boulth 7y ago
Funny thing that you mention it here as one of the authors of security.txt found this exact issue on several sites: https://edoverflow.com/2018/logic-flaws-in-wot-services/ https://edoverflow.com/2018/logic-flaws-in-wot-services/ section "Attack Vector Two – Namespace attacks"
- Dylan16807 7y agoIt's the opposite. They found the issue .well-known exists to solve. In that section they got /security.txt and /keybase.txt and explained why validating based off a file in the root directory is a terrible idea. Also, the issue was not on those sites. The issue was with keybase's logic.