4 ms·
Where should the security contact information be? If you found a flaw on site example.com, where would you look first for a security contact?
by jf 17y ago
Where should the security contact information be?
If you found a flaw on site example.com, where would you look first for a security contact?
- pmjordan 17y agoProbably "feedback", "contact us", and "support", roughly in that order.
- tptacek 17y ago/security, security@, the "security" tab on the front page.
- petercooper 17y agoDepends on the protocol the security flaw is with, but RFC 2142 would indicate that if it's a Web issue, then webmaster@example.com - sadly people don't pay attention to many standards like this anymore, though, because they'd rather the Internet be broken.
- tptacek 17y agoA weird comment, since this isn't a web issue, it's an issue with a software library.