diff --git a/public/.well-known/hall-of-fame.txt b/public/.well-known/hall-of-fame.txt new file mode 100644 index 00000000..6a40abe2 --- /dev/null +++ b/public/.well-known/hall-of-fame.txt @@ -0,0 +1,22 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +# === Hall of Fame === +# +# This is a list of very awesome and friendly hackers who have reported +# security issues in git-shortlog format. + +Parth Narula (3): + Hyperlink Injection https://0xacab.org/sutty/sutty/-/issues/17494 + Email Flooding Vulnerability https://0xacab.org/sutty/sutty/-/issues/17493 + Missing MTA-STS https://0xacab.org/sutty/sutty.nl/-/commit/e506a3f3fedb46979894f4d9dab665723d855a50 + +Sakil Hasan Saikat (1): + Exposed yarn.lock File Leading to Potential Information Disclosure https://0xacab.org/sutty/sutty/-/issues/18071 +-----BEGIN PGP SIGNATURE----- + +iHUEARYKAB0WIQRb/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mhQAAKCRBzWVgylXkB +ZQSAAP449kcjD8wD97UifD98xwXxxiOINwuu7congn4haEuFIgEA8Xz+qLBHU2g2 +ybXZP+lER0kV2dVexCDrbWbVT8kPJA4= +=PEVU +-----END PGP SIGNATURE----- diff --git a/public/.well-known/pgp.asc b/public/.well-known/pgp.asc index 83717c46..da7ba6fc 100644 --- a/public/.well-known/pgp.asc +++ b/public/.well-known/pgp.asc @@ -1,13 +1,13 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- -mDMEXuIuxxYJKwYBBAHaRw8BAQdAx7++TG7xSYPtEC7cALkX2bQkIsPdiPjA1NW6 -KyZIXjS0GFN1dHR5IDxzdXR0eUByaXNldXAubmV0PoiQBBMWCgA4FiEEODcdZeeQ -ThO24WEhhg0wFh4HfXEFAl7iLscCGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AA -CgkQhg0wFh4HfXHewQEA7PIVXSrXapCqz+bBypFHeowtiqi8PCJeaueeDWN7+1AB -AKerQ/C56DiSpwCdNDvlleuRlhk3TedStnZOZw83T4UDuDgEXuIuxxIKKwYBBAGX -VQEFAQEHQGl8Q/uPz3VwWPpAS6KJLZI27caqsgG416mSrbU54YQ1AwEIB4h4BBgW -CgAgFiEEODcdZeeQThO24WEhhg0wFh4HfXEFAl7iLscCGwwACgkQhg0wFh4HfXHM -CAEA5Lw718/jYN1DztG8/mGI3E7le19NSjdkc00p8VBESpcBAL4bNmVKqPZa14/D -eu2uHSY1XcLpdUjD+eq0KjGpG90M -=X71f +mDMEZ2mRdBYJKwYBBAHaRw8BAQdAv+efdxjE3mScSj9gE/aToTRM1a7BjhGJ3ZOF +frWMnYW0HVN1dHR5IENvb3AgPHN1dHR5QHJpc2V1cC5uZXQ+iJkEExYKAEEWIQRb +/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mRdAIbAwUJBaOagAULCQgHAgIiAgYVCgkI +CwIEFgIDAQIeBwIXgAAKCRBzWVgylXkBZSRAAQD3l2jbDGPjXyDo2nfZ+/cBuy77 +dTFK4wzifDmeCr8MfwEAs1Qvh/4bHcPyjL8E07UZQfdA0BA9hdzDLSQoYRe2ZAm4 +OARnaZF0EgorBgEEAZdVAQUBAQdAiW4wq8MhDMM8Tw8JTOyuYUT7QCH5he4Fi37F +9+upXg0DAQgHiH4EGBYKACYWIQRb/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mRdAIb +DAUJBaOagAAKCRBzWVgylXkBZSvDAP4kPEH+llMvjkAN68+ezBqrRwxbSzjlVziR +wB29o4OELwD/fZZfDan6PSiigXRwH0vImXSTaXCO0nk8sSfeQfhcpgY= +=njjL -----END PGP PUBLIC KEY BLOCK----- diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt index 1783385f..c0cf2200 100644 --- a/public/.well-known/security.txt +++ b/public/.well-known/security.txt @@ -5,12 +5,11 @@ Contact: sutty+security@riseup.net Encryption: https://panel.sutty.nl/.well-known/pgp.asc Preferred-Languages: es,en Canonical: https://panel.sutty.nl/.well-known/security.txt +Acknowledgments: https://panel.sutty.nl/.well-known/hall-of-fame.txt -----BEGIN PGP SIGNATURE----- -iNUEARYKAH0WIQQ4Nx1l55BOE7bhYSGGDTAWHgd9cQUCX7WQZV8UgAAAAAAuAChp -c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Mzgz -NzFENjVFNzkwNEUxM0I2RTE2MTIxODYwRDMwMTYxRTA3N0Q3MQAKCRCGDTAWHgd9 -cTBjAP9CxBiGyhkGdtcv1uUUZEG2Oq3RdYjr6fGbVDQt7YidBQD/U4pyDz+dwkZZ -0+YAA9Hst0RqOwJpLh5yPGCVIdhGLgE= -=CxQY +iHUEARYKAB0WIQRb/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mTkQAKCRBzWVgylXkB +ZYI7AP9rROT5tInVlfjt1sTIYpEqO7H6IVWt6gBC2YkcaS5mvgEA1tIi9FZ2vT4F +WTPg+c5FxXku+uggUQCYPhTeG8RWJwE= +=4vAv -----END PGP SIGNATURE-----