# DuoDesk — how to report a security problem.
# RFC 9116. Canonical location: https://duodesk.io/.well-known/security.txt
#
# Contact is a page rather than an address on purpose: the address is set in
# the dashboard and read live by the site, so one change updates it everywhere
# without a redeploy. A hard-coded mailto here would be the one copy that goes
# stale, and a bounced disclosure is a disclosure that goes somewhere else.

Contact: https://duodesk.io/#contact
Policy: https://duodesk.io/security.html
Canonical: https://duodesk.io/.well-known/security.txt
Preferred-Languages: en, ro

# Renew this before the date below. An expired file is read as an abandoned
# one, which is worse than having none at all.
Expires: 2027-09-01T00:00:00.000Z