[DNSOP] DNS Security TXT - A standard for nominating security contact points and policies via DNS TXT records
Stephane Bortzmeyer <[email protected]>
| Newsgroups | gmane.ietf.dnsop |
|---|---|
| Organization | NIC France |
| Message-ID | <[email protected]> |
It does not seem there is an Internet-Draft for this but it may interest people here: Summary: The report channel, published in DNS When people find security issues in Internet-facing systems, the correct channel to report them isn't always clear, and the relevant disclosure policy for the system isn't always apparent. DNS Security TXT extends the work done by security.txt to answer this question using DNS, arguably the most ubiquitous system on the Internet. When deployed, it gives security researchers, Internauts, and concerned Internet citizens clear and authoritative direction to the correct channels for reporting security issues, and to the policies an organization sets out for all systems under a domain. https://dnssecuritytxt.org/ _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]