# Supload security contact — RFC 9116
# https://www.rfc-editor.org/rfc/rfc9116
#
# This host (sup-load.com) serves the marketing and legal site. The Policy
# field points at Supload's coordinated vulnerability disclosure policy, which
# is published on both Supload hosts so a researcher reaches the same rules of
# engagement whichever record they find first.
#
# TWO Policy fields, which RFC 9116 permits: the .txt is the canonical text and
# is byte-identical on both hosts, and /security is the same policy as a
# readable page, linked from the site footer and the support page so a human
# can find the security contact without fetching a .well-known file. Both carry
# the AUTHORIZATION AND SAFE HARBOUR section — keep them in step, and keep the
# .txt in step with its mirror at
# supload-portals/portal-minimal/public/.well-known/disclosure-policy.txt.
Contact: mailto:security@sup-load.com
Expires: 2027-08-27T00:00:00.000Z
Policy: https://sup-load.com/.well-known/disclosure-policy.txt
Policy: https://sup-load.com/security
Preferred-Languages: en
Canonical: https://sup-load.com/.well-known/security.txt