Submission timeline
2007–2026One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.
First comments on top threads
HN comment orderThe last time this came up on HN it got quite a negative review from someone who had tried it on several sites: https://news.ycombinator.com/item?id=19152145 It apparently attracted automated scanners and the signal to noise ratio was atrocious.
I don't think this is fully baked. Most importantly: there are no formal definitions for what these disclosure terms mean, the distinctions between them are not unimportant, and the most important distinctions have nothing at all to do with "disclosure". To me, as a working professional in this field, "disclosure: full" informs me that if I report a vulnerability in your service, you'll publish some sort of public advisory, or agree to me doing so, on my own timeline, regardless…
We use this and we see there are special crawler inspecting the file. Even special security scanner that access the file before running their tests (e.g. checking for XSS). It's surprising we get contacted by 'bug hunters' who are not aware, don't contact us on the listed email address, don't read the linked documented. When it comes to encrypted email using our listed public key we never received one.
The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.
- Breakout years
- 2
- Total points
- 1458
- Total comments
- 308
100+ points or 50+ comments
reference only — not used in Hall rules or ranking
reference only — not used in Hall rules or ranking
Every submission
| Date | Title as submitted | By | Points | Comments |
|---|---|---|---|---|
| 2017-10-06 | Security.txtFirst breakout | janvdberg | 705 | 141 |
| 2020-12-29 | A proposed standard which allows websites to define security policies | _wldu | 3 | 1 |
| 2021-03-14 | Security.txtBest thread · Latest 20+ point return | tosh | 746 | 165 |
| 2022-10-26 | Security.txt | metadat | 2 | 0 |
| 2024-06-07 | Security.txtHall induction | skilled | 2 | 1 |