Posts tagged #standards.
How to report a security problem
There is now a vulnerability disclosure policy at /security/, an address to send a report to, a public key to encrypt it with, and a signed security.txt so the machines can find all three. No bounty, but an acknowledgment within five business days and no lawyers.
Releases#website#security#standardsA trail, and a boundary
Every domain page and post now shows where it sits in the site, and the browser enforces limits on what other sites can do with our pages. Including one limit we chose not to set.
Dev blog#website#standards#privacyNothing loads until you say yes
A published privacy policy, and a consent gate that keeps analytics and advertising off the page until you allow them. Declining costs you nothing.
News#privacy#website#standardsOur domains announce themselves — _for-sale DNS records
Every domain in the portfolio now publishes an RFC 10023 _for-sale record, so tooling can discover it is for sale from DNS alone.
Dev blog#dns#standards