Skip to content

Fix for #164 #166

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nightwatchcyber merged 4 commits into from
Oct 7, 2019
Merged

Fix for #164 #166

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
2056a34
Fix for #164
nightwatchcyber Oct 7, 2019
c9521e0
Revert "Fix for #164"
nightwatchcyber Oct 7, 2019
d8c1692
Merge remote-tracking branch 'upstream/master'
nightwatchcyber Oct 7, 2019
13446e2
Merged changes + fix for #164
nightwatchcyber Oct 7, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 16 additions & 11 deletions draft-foudil-securitytxt.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,13 +78,14 @@
line-height: 100%;
margin: 10px 0 32px;
}
#rfc\.abstract+p, #rfc\.abstract p {
#rfc\.abstract+p, #rfc\.abstract+p code, #rfc\.abstract+p samp, #rfc\.abstract+p tt {
font-size: 20px;
line-height: 28px;
}

samp, tt, code, pre, span.tt {
font: 13.5px Consolas, monospace;
font-size: 13.5px;
font-family: Consolas, monospace;
font-size-adjust: none;
}
pre {
Expand Down Expand Up @@ -276,8 +277,8 @@
.github-fork-ribbon-wrapper {
position: fixed;
}
/*]]>*/</style>
<meta name="viewport" content="initial-scale=1.0">
/*]]>*/</style>
<meta name="viewport" content="initial-scale=1.0">


<link href="#rfc.toc" rel="Contents">
Expand Down Expand Up @@ -334,12 +335,12 @@
<link href="#rfc.authors" rel="Chapter">


<meta name="generator" content="xml2rfc version 2.22.0 - https://tools.ietf.org/tools/xml2rfc" />
<meta name="generator" content="xml2rfc version 2.16.0 - https://tools.ietf.org/tools/xml2rfc" />
<link rel="schema.dct" href="http://purl.org/dc/terms/" />

<meta name="dct.creator" content="Foudil, E. and Y. Shafranovich" />
<meta name="dct.identifier" content="urn:ietf:id:draft-foudil-securitytxt-08" />
<meta name="dct.issued" scheme="ISO8601" content="2019-10-01" />
<meta name="dct.issued" scheme="ISO8601" content="2019-10-06" />
<meta name="dct.abstract" content="When security vulnerabilities are discovered by independent security researchers, they often lack the channels to report them properly. As a result, security vulnerabilities may be left unreported. This document defines a format (&#8220;security.txt&#8221;) to help organizations describe the process for security researchers to follow in order to report security vulnerabilities." />
<meta name="description" content="When security vulnerabilities are discovered by independent security researchers, they often lack the channels to report them properly. As a result, security vulnerabilities may be left unreported. This document defines a format (&#8220;security.txt&#8221;) to help organizations describe the process for security researchers to follow in order to report security vulnerabilities." />

Expand All @@ -363,12 +364,12 @@
<td class="right">Y. Shafranovich</td>
</tr>
<tr>
<td class="left">Expires: April 3, 2020</td>
<td class="left">Expires: April 8, 2020</td>
<td class="right">Nightwatch Cybersecurity</td>
</tr>
<tr>
<td class="left"></td>
<td class="right">October 01, 2019</td>
<td class="right">October 06, 2019</td>
</tr>


Expand All @@ -384,7 +385,7 @@ <h1 id="rfc.status"><a href="#rfc.status">Status of This Memo</a></h1>
<p>This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.</p>
<p>Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.</p>
<p>Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."</p>
<p>This Internet-Draft will expire on April 3, 2020.</p>
<p>This Internet-Draft will expire on April 8, 2020.</p>
<h1 id="rfc.copyrightnotice"><a href="#rfc.copyrightnotice">Copyright Notice</a></h1>
<p>Copyright (c) 2019 IETF Trust and the persons identified as the document authors. All rights reserved.</p>
<p>This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.</p>
Expand Down Expand Up @@ -774,7 +775,7 @@ <h1 id="rfc.section.5">

lang-field = "Preferred-Languages" fs SP lang-values

lang-values = lang-tag *("," [WSP] lang-tag)
lang-values = lang-values = lang-tag *(*WSP "," *WSP lang-tag)

ext-field = field-name fs SP unstructured

Expand Down Expand Up @@ -1173,7 +1174,10 @@ <h1 id="rfc.appendix.B.8">
</h1>
<p></p>

<ul><li>TBD</li></ul>
<ul>
<li>Addressing AD feedback (#165)</li>
<li>Fix for ABNF grammar in lang-values (#164)</li>
</ul>
<p id="rfc.section.B.8.p.2">Full list of changes can be viewed via the IETF document tracker: https://tools.ietf.org/html/draft-foudil-securitytxt</p>
<h1 id="rfc.authors"><a href="#rfc.authors">Authors' Addresses</a></h1>
<div class="avoidbreak">
Expand Down Expand Up @@ -1222,3 +1226,4 @@ <h1 id="rfc.authors"><a href="#rfc.authors">Authors' Addresses</a></h1>

</body>
</html>

9 changes: 5 additions & 4 deletions draft-foudil-securitytxt.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,9 +98,9 @@ defined for "unstructured" in section 3.2.5 of {{!RFC5322}}.

A "field" MUST always consist of a directive and a value
("Contact: https://example.com/security"). A security.txt file
can have an unlimited number of fields. It is important to note that each field MUST appear on
can have an unlimited number of fields. It is important to note that each field MUST appear on
its own line. Unless specified otherwise by the field definition,
multiple values MUST NOT be chained together for a single directive.
multiple values MUST NOT be chained together for a single directive.
Unless otherwise indicated in a definition of a particular field, any directive MAY appear
multiple times.

Expand Down Expand Up @@ -458,7 +458,7 @@ policy-field = "Policy" fs SP uri

lang-field = "Preferred-Languages" fs SP lang-values

lang-values = lang-tag *("," [WSP] lang-tag)
lang-values = lang-values = lang-tag *(*WSP "," *WSP lang-tag)

ext-field = field-name fs SP unstructured

Expand Down Expand Up @@ -757,7 +757,8 @@ of DNS-stored encryption keys (#28 and #94)
- Fixed nits from the IETF validator

## Since draft-foudil-securitytxt-07
- TBD
- Addressing AD feedback (#165)
- Fix for ABNF grammar in lang-values (#164)

Full list of changes can be viewed via the IETF document tracker:
https://tools.ietf.org/html/draft-foudil-securitytxt
60 changes: 30 additions & 30 deletions draft-foudil-securitytxt.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@
Network Working Group E. Foudil
Internet-Draft
Intended status: Informational Y. Shafranovich
Expires: April 3, 2020 Nightwatch Cybersecurity
October 01, 2019
Expires: April 8, 2020 Nightwatch Cybersecurity
October 06, 2019


A Method for Web Security Policies
Expand Down Expand Up @@ -36,7 +36,7 @@ Status of This Memo
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."

This Internet-Draft will expire on April 3, 2020.
This Internet-Draft will expire on April 8, 2020.

Copyright Notice

Expand All @@ -53,7 +53,7 @@ Copyright Notice



Foudil & Shafranovich Expires April 3, 2020 [Page 1]
Foudil & Shafranovich Expires April 8, 2020 [Page 1]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -109,7 +109,7 @@ Table of Contents



Foudil & Shafranovich Expires April 3, 2020 [Page 2]
Foudil & Shafranovich Expires April 8, 2020 [Page 2]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -165,7 +165,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 3]
Foudil & Shafranovich Expires April 8, 2020 [Page 3]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -221,7 +221,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 4]
Foudil & Shafranovich Expires April 8, 2020 [Page 4]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -277,7 +277,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 5]
Foudil & Shafranovich Expires April 8, 2020 [Page 5]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -333,7 +333,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 6]
Foudil & Shafranovich Expires April 8, 2020 [Page 6]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -389,7 +389,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 7]
Foudil & Shafranovich Expires April 8, 2020 [Page 7]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -445,7 +445,7 @@ Encryption: dns:5d2d37ab76d47d36._openpgpkey.example.com?type=OPENPGPKEY



Foudil & Shafranovich Expires April 3, 2020 [Page 8]
Foudil & Shafranovich Expires April 8, 2020 [Page 8]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -501,7 +501,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 9]
Foudil & Shafranovich Expires April 8, 2020 [Page 9]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -557,7 +557,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 10]
Foudil & Shafranovich Expires April 8, 2020 [Page 10]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -613,7 +613,7 @@ uri = < URI as per [RFC3986] >



Foudil & Shafranovich Expires April 3, 2020 [Page 11]
Foudil & Shafranovich Expires April 8, 2020 [Page 11]

Internet-Draft A Method for Web Security Policies October 2019

Expand All @@ -626,7 +626,7 @@ policy-field = "Policy" fs SP uri

lang-field = "Preferred-Languages" fs SP lang-values

lang-values = lang-tag *("," [WSP] lang-tag)
lang-values = lang-values = lang-tag *(*WSP "," *WSP lang-tag)

ext-field = field-name fs SP unstructured

Expand Down Expand Up @@ -669,7 +669,7 @@ unstructured = < imported from section 3.2.5 of [RFC5322] >



Foudil & Shafranovich Expires April 3, 2020 [Page 12]
Foudil & Shafranovich Expires April 8, 2020 [Page 12]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -725,7 +725,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 13]
Foudil & Shafranovich Expires April 8, 2020 [Page 13]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -781,7 +781,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 14]
Foudil & Shafranovich Expires April 8, 2020 [Page 14]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -837,7 +837,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 15]
Foudil & Shafranovich Expires April 8, 2020 [Page 15]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -893,7 +893,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 16]
Foudil & Shafranovich Expires April 8, 2020 [Page 16]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -949,7 +949,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 17]
Foudil & Shafranovich Expires April 8, 2020 [Page 17]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1005,7 +1005,7 @@ Internet-Draft A Method for Web Security Policies October 2019



Foudil & Shafranovich Expires April 3, 2020 [Page 18]
Foudil & Shafranovich Expires April 8, 2020 [Page 18]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1061,7 +1061,7 @@ Appendix A. Note to Readers



Foudil & Shafranovich Expires April 3, 2020 [Page 19]
Foudil & Shafranovich Expires April 8, 2020 [Page 19]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1117,7 +1117,7 @@ B.2. Since draft-foudil-securitytxt-01



Foudil & Shafranovich Expires April 3, 2020 [Page 20]
Foudil & Shafranovich Expires April 8, 2020 [Page 20]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1173,7 +1173,7 @@ B.5. Since draft-foudil-securitytxt-04



Foudil & Shafranovich Expires April 3, 2020 [Page 21]
Foudil & Shafranovich Expires April 8, 2020 [Page 21]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1217,7 +1217,9 @@ B.7. Since draft-foudil-securitytxt-06

B.8. Since draft-foudil-securitytxt-07

o TBD
o Addressing AD feedback (#165)

o Fix for ABNF grammar in lang-values (#164)

Full list of changes can be viewed via the IETF document tracker:
https://tools.ietf.org/html/draft-foudil-securitytxt
Expand All @@ -1227,9 +1229,7 @@ B.8. Since draft-foudil-securitytxt-07





Foudil & Shafranovich Expires April 3, 2020 [Page 22]
Foudil & Shafranovich Expires April 8, 2020 [Page 22]

Internet-Draft A Method for Web Security Policies October 2019

Expand Down Expand Up @@ -1285,4 +1285,4 @@ Authors' Addresses



Foudil & Shafranovich Expires April 3, 2020 [Page 23]
Foudil & Shafranovich Expires April 8, 2020 [Page 23]