Security Text File

Today, I just found a way to add the security.txt to this blog.

TL;DR

#

/.well-known/security.txt is an accepted standard (RFC 9116) for website security information that allows security researchers to report security vulnerabilities.

Hugo Web

#

To add security.txt to Hugo website, go create .well-known folder in the root of static folder. Create a security.txt file as below.

HUGO_SITE/
└── static/
    └── .well-known/
        └── security.txt

And, it can be accessed directly at: https://myseq.github.io/.well-known/security.txt

Links

#

• security.txt / GH: security.txt
• Wikipedia security.txt / Sample security.txt
• IANA security.txt Fields / RFC 9116
• GH: Python Client for /security.txt