After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

RT @swisscyberstorm: The Swiss Federal Government has adopted a report on ethical hacking referencing two @swisscyberstorm 2023 speakers: @…

@codingo_ Excuse me, sir. Do you have a moment to talk about our Lord and Saviour, security.txt?

I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.

RT @KarimPwnz: 👋 I'm graduating (Spring 2024), and I am looking for a security role in the US. My interests include web app security, CI/CD…

I have set up a LinkedIn profile if people want to stay connected:

@ElSec_ 👏

RT @securitytxt: Where did you first hear about security.txt?

@HusseiN98D

@Hac10101 This blog post by @infosec_au:

RT @securitytxt: How do you pronounce "security.txt"?

I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (.

@corg_e @ctbbpodcast by @Rhynorater and @0xteknogeek

RT @securitytxt: Exciting news! @Apple joins the list of companies with a security.txt file. Now, we only need @netflix to complete the FAA…

@hacker_ @codingo_ @rub003 going to be jealous. 🙃

I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.

@ant0inet 3️⃣ Finally, realising that *.cust.swisscom.ch is out of scope

Reminder: if you would like to follow my blog via RSS, I have a feed at :)

With references to @hacker_ and @fin1te. Thank you to @KarimPwnz for reviewing a draft.

@ant0inet There is a recent publication (12 Jan 2023) where the authors explored these factors and even ranked each factor's importance with a survey: Learning and building a career are some of the other factors not mentioned in your tweet.