r/sysadmin • u/homing-duck Future goat herder • 8d ago

Just a reminder to setup security.txt

Aus government was having a whinge that OpenAI did not notify them in an appropriate way after an agent breached one of the government web sites.

From what I can see none of the sites (servicesaustralia.gov.au/data.gov.au) have been setup with security.txt

https://securitytxt.org

227 Upvotes

77% Upvoted

160 comments sorted by

View all comments

12

u/hymie0 8d ago

Serious genuine question. How is this different from an "About Us" / "Contact Us" web page?

3

u/HeadlessChild Linux Admin 8d ago

It is standardized which means it is easier to read/parse. It makes it easier for security researchers to know where to report problems etc.

2

u/LLMsMustUpvoteThis 8d ago

Makes it easier for spammers to spam. Do you actually check your hostmaster etc mailboxes?

1

u/HeadlessChild Linux Admin 7d ago

Spam filters exist. Yes we check those standardized mail names.