A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


# Canonical URL's
Canonical: https://trasno.org/.well-known/security.txt
Canonical: https://www.trasno.org/.well-known/security.txt

Contact: mailto:quintela@trasno.org
Policy: https://www.trasno.org/TBD
Encryption: https://www.trasno.org/TBD
Expires: 2022-12-31T00:00:00z

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEGJn/jt6/WMzuA0uC9IfvGFhy1yMFAmObui0ACgkQ9IfvGFhy
1yMk3RAAqVLjyOWuYlGnprc/sd+sx43WRO0TSbZ0TqIAUf0ggn65i79uxalXAbKS
HzxjAgPSnazbDbExHsuW6FDp2VIsP+WwTFjo52eslyyiiy188r24HkuZhxspTnj6
svCg1dc4rNqwBgXq1AowHW9UpchE/VV+brtMXO2vXqia+twO3uQ3/h5snJFsXgMW
aEThhL51PpgMSaUmDiCehPho9urB2sdjzr5d3E0eWlOTFKOr5WjJYZ4vs/ZmhUlD
BNsy0b3tHdE/uCV1NmowPn5C0PWW2Dsop0mhZpPFlvOjh+JDZdL/qK1wEWrLJlSK
bxByI27V8JKR1ScidqOz9h4HggBxXeBhCmkbmdxPDynEikufehNHZDrfwDPwhYNG
CQYduolS80bln1ugAkx5Fxgyw1hlN8suewbY1e63qyWuMx7cIcemMe+zeEOYH1ZT
1GS5yKlqNg7wevwBGlFwHvcaYdtrMvl9q4NikE9bufl7F8B/KCk1wE9te5l/b8e3
r0AEy/D6r7AhUjMUqPqVmEafKF2aZS3dUjRpK5a/Iwr91gzbwFiChqIaY9JGON5c
inV9hYEoxIwXi34gksCuDvTNKcQ7l5hg3XxZ/U/G4jEsidpsy9Fw24lVBro2SZ/Y
hQ8ydxqggLiDPCh5GE1r/2FAj8g8a3NktxzP5z8hp4GYolXnRLA=
=oe5g
-----END PGP SIGNATURE-----