2 ms·
@JoachimSchipper do sec people inherently know to try hitting /security.html by convention, or should there be links to it from the main site?
by jaytaylor 14y ago
@JoachimSchipper do sec people inherently know to try hitting /security.html by convention, or should there be links to it from the main site?
- tptacek 14y agoThey know to look for a link to the security page. Github's is in their site footer. 37signals' is in their site footer. Twitter's is linked off the sidebar in their "About" page. Google's and Facebook's are the top search result for their site and "vulnerability" "security". These are all fine options.
- jaytaylor 14y agoThank you!