检测内容
读取网站公开的 security.txt 安全联系信息。
用途说明
将检测到的公开配置与网站预期设置核对,可帮助定位访问、证书和抓取问题。结果反映检测当时的响应,网络环境或网站防护可能影响部分项目。
技术术语
- security.txt
- A file at /.well-known/security.txt telling security researchers how to report a problem.
- Signed security.txt
- A PGP signature proves the file came from the site's owner and hasn't been changed.
- Contact Field
- The required field giving an email address or link for reporting vulnerabilities.
- Expires Field
- The required date after which the file counts as out of date. It should be under a year ahead.