A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# SchorelWeb RFC 9116 security.txt
#
Canonical: https://www.thedigitalscrapbookshop.com/.well-known/security.txt

Expires: 2024-05-31T12:40:01+00:00

# You can file a report via our contactform at
Policy: https://www.thedigitalscrapbookshop.com/contact_us.html

# Please always try to contact us through our contact form
Contact: https://www.thedigitalscrapbookshop.com/contact_us.html

# We do *not* use OpenPGP, so do *not* use the key that was used to sign this
# security.txt file for sending us messages.

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: nl, en

# Once a year we update our acknowledgement text file:
Acknowledgments: https://www.thedigitalscrapbookshop.com/privacy.html

 
-----BEGIN PGP SIGNATURE-----
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=nVTc
-----END PGP SIGNATURE-----