3 ms·
sure, what about TXT records then? seems dangerous that anyone who can modify the root of a webserver content can impersonate security contacts/pubkeys.
by a-dub 6y ago
sure, what about TXT records then?
seems dangerous that anyone who can modify the root of a webserver content can impersonate security contacts/pubkeys.
- Anunayj 6y agowell .well-known should be well guarded anyway, since it is used for things like issuing SSL certs by Let's Encrypt (and possibly more CAs). Giving anyone access to your root of webserver is giving anyone access to your website.