Posted by k1m 12 hours ago
Though some sites drop it at the root /security.txt instead of /.well-known/security.txt
Note, invites beg bounties spam.
I’ll be using this to add some extra tags to my pages.
It looks like there are some features noted as “required” that are actually required by the spec (e.g. a title tag), and others that are required by opinion (e.g. https) so there’s an element^ of pragmatic best practice being recommended.
I find it curious that setting a colour hint for the browser is recommended. I’m one for letting the browser look as vanilla as possible and letting my pages do the talking.
^Pun not intended, blink and you’ll miss it
Yeah, mostly slop. I wonder why the slop slingers never disable Claude's self-attribution, and are too lazy to commit themselves, are they proud that they're delegating everything to a slop machine?