A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

#
# DigiDoc RFC 9116 security.txt
#
Canonical: https://onderwijsspiegel.nl/.well-known/security.txt
Canonical: https://www.onderwijsspiegel.nl/.well-known/security.txt
Canonical: https://digi.nl/.well-known/security.txt
Canonical: https://digidoc.nl/.well-known/security.txt
Expires: 2024-04-01T00:00:00+01:00
Contact: mailto:csirt-20240401@digi.nl
Encryption: https://onderwijsspiegel.nl/.well-known/security.crt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEafsp/x/ghTbzVYdVrxuRONDZJJgFAmW5RggACgkQrxuRONDZ
JJjzKwf+KInqlHSTAq+PgX6WM62sbbq6CVkbJr2lghILOTWAZXfwk9kgZC7mhXFm
Gp0jlfcbqgQcBfe9GBrknFfOFXeGmlKCs9Jvfrpx1aBlqGrqHylikioYB+YAGZtx
/cYP5tVbNFi6JmspdohWA4VJLPmLiQYJrT7OxOnhh2yIDEFTmjGnP8qwjoine9d4
NyXMmegDyIMiOm3jqWIFp3rbt6DSgBBT5msFDN78UPF2p8h09+deid7msqETi0QC
imGEe/WbMKLy4CycoRD8dN86aJRcRWHFHzKUZXB0WqNwkqaDusJPhYuWt9iprNnX
GHLp3OCkBzR6yZltrb/1n5xQGF13/w==
=g49X
-----END PGP SIGNATURE-----