Issues

• Add a Safe-Harbor field to declare legal authorization for good-faith research

  securitytxt/security-txt#229 · Filter by author nubivio opened on Jun 28, 2026
  2

• IANA registration for "Bug-Bounty" field

  securitytxt/security-txt#226 · Filter by author maribu opened on Feb 6, 2026
  10

• Allow HTML

  securitytxt/security-txt#223 · Filter by author acjbizar opened on Aug 6, 2024
  5

• a one-off annual cycle check is impossible within exactly one year

  securitytxt/security-txt#222 · Filter by author janwillemstegink opened on Apr 9, 2024

• SSH signatures as an alternative to OpenPGP ones

  future work
  securitytxt/security-txt#216 · Filter by author Mikaela opened on Apr 11, 2022
  3

• Specify allowed encryption schemes

  ➡ Encryption:future work▶️ spec
  securitytxt/security-txt#214 · Filter by author technion opened on Sep 8, 2021
  15

• Scope field

  future work
  securitytxt/security-txt#213 · Filter by author nightwatchcyber opened on Jul 11, 2021
  9

• Add a link to the human and machine readable security advisories

  future work
  securitytxt/security-txt#209 · Filter by author santosomar opened on Apr 20, 2021
  7

• Support distinct policies: bug bounty and external vuln disclosure

  future work
  securitytxt/security-txt#207 · Filter by author vladionescu opened on Mar 30, 2021
  3

• detached signatures (allow multiple people to sign the security.txt)

  future work
  securitytxt/security-txt#206 · Filter by author herbetom opened on Mar 18, 2021

• Defer file systems work to future date

  future work
  securitytxt/security-txt#201 · Filter by author nightwatchcyber opened on Feb 24, 2021
  3

• Add differentiation between PSIRT and CERT contact

  future work
  securitytxt/security-txt#199 · Filter by author tschmidtb51 opened on Feb 24, 2021
  2

• Extension: security.txt in DNS

  future work
  securitytxt/security-txt#196 · Filter by author Addvilz opened on Sep 16, 2020
  3

• Add a ability to differentiate security contacts between parts of an application / scope of security.txt

  future work
  securitytxt/security-txt#195 · Filter by author spidererrol opened on Aug 28, 2020
  1

• Add language clarifying scope around product vulnerabilities

  future work
  securitytxt/security-txt#185 · Filter by author nightwatchcyber opened on Jan 30, 2020
  4

  

• Discuss embedding the file in desktop or mobile apps

  future work
  securitytxt/security-txt#184 · Filter by author nightwatchcyber opened on Jan 30, 2020
  2

• Last Call: Consider a separate abuse contact

  future work
  securitytxt/security-txt#178 · Filter by author nightwatchcyber opened on Dec 18, 2019
  1

• HTTPS MUST on IP addresses with certificate validation?

  future work
  securitytxt/security-txt#177 · Filter by author asbjornst opened on Dec 14, 2019
  1

• Linter / validator for RFC compliance and basic error checks?

  on holdtools
  securitytxt/security-txt#104 · Filter by author anroots opened on Apr 26, 2018
  10