A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URLs
Canonical: https://ahoj.email/.well-known/security.txt
Canonical: https://mailer.ahoj.email/.well-known/security.txt
Canonical: https://mail.ahoj.email/.well-known/security.txt

# Our security address
Contact: mailto:hi@ahoj.email

# Our OpenPGP key
Encryption: https://ahoj.email/.well-known/pgp.txt

# Our security policy
Policy: mailto:hi@ahoj.email

Expires: 2024-04-23T10:00:00z
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=FeAj
-----END PGP SIGNATURE-----