A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:operativ.it-sikkerhet@nrk.no

Preferred-Languages: no, en

Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/85EF44309CC0DFC4F7E04393E7BCE5AA9411C063

Canonical: https://yr.no/.well-known/security.txt

Acknowledgments: https://info.nrk.no/hjem/responsible-disclosure-policy/#security-hall-of-fame

Policy: https://info.nrk.no/hjem/responsible-disclosure-policy/

Hiring: https://info.nrk.no/karriere/

Expires: 2026-03-01T09:00:00.000Z

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEhe9EMJzA38T34EOT57zlqpQRwGMFAmX4Ax4ACgkQ57zlqpQR

wGOgtBAAl+eqOiFrzkhLbdx3VjNmF8HZzYtDanljQS5gnP3c/Z96iisnhBOzR33T

olNKwIOubcrxTaET+76CKkHRdFTAN9fWal54+P2wtFJGm5KEbcvibOOYGUbCknvT

SSr7VuYBpCJmpVx61tlKToJIepP66oXVacno/5AZ0wwwTP2nSIAMX6OLaVOqxo0M

pq208FKPvkxsO6R90swuqQyYYR30sgkoXW3fckKu728PzZCOamq0rJ2AM0nMzb5p

Q4jHlUMJktxqSbtKWuGEvsQeTvlaZDDFeJKbt2c7Yb6RjtD9t1fkY9mkLVWII0VO

V/uvUmgJ4Yykyrk9TNsV6aY9FpOyq1kBUINjmkvwx93H4ArNZph1QIW3wuRx357e

JJvrG5MZIDJMPSE8WJvKznRS0yvYTLSGMFGBFoKYRKS3Rowf1eov1N7GTK3nKeNz

F7+2zkopS7H8hWj8k1xeSFdnPtAMWKIn1rD63v9Ucqd9+ppJGRP/ZpH0uYNeZebI

zUiBXAnBeNe/s5XYwG6JVfar7cUDzgZtRaYsght36Zg8d+durqRw4nfiEYf0I+5G

Pojt0b8j5rSOmQEIk6pNS5c1xOu8Hlyka6WNy3q7iequ50rvIjq7tTGAShbM4oAT

GS7aN+fuQVYKU/78AMhApf7BchMnVKYoEPyPDJjVFrBop/LOYLM=

=vPFn

-----END PGP SIGNATURE-----