3 ms·

Definitely felt like wishful thinking whenever I heard that security.txt was a thing. From the blog post- > Of the 666,771 most popular websites on the Alexa

Definitely felt like wishful thinking whenever I heard that security.txt was a thing. From the blog post- > Of the 666,771 most popular websites on the Alexa list, I found 2,884 security.txt files that were content-type “text/plain” and returned a HTTP 200 status code. Not all of these were valid security.txt files, but most were. Seems I was right?

_wldu 6y ago
Yes, it's not as widely implemented as I expected. Adoption seems to drop quickly. Roughly 20% for the top 10 websites, 15% for the top 100 and about 10% for the top 1,000. It's downhill from there.