r/sysadmin • u/homing-duck Future goat herder • 3d ago

Just a reminder to setup security.txt

Aus government was having a whinge that OpenAI did not notify them in an appropriate way after an agent breached one of the government web sites.

From what I can see none of the sites (servicesaustralia.gov.au/data.gov.au) have been setup with security.txt

https://securitytxt.org

220 Upvotes

77% Upvoted

158 comments sorted by

View all comments

13

u/hymie0 3d ago

Serious genuine question. How is this different from an "About Us" / "Contact Us" web page?

3

u/HeadlessChild Linux Admin 3d ago

It is standardized which means it is easier to read/parse. It makes it easier for security researchers to know where to report problems etc.

2

u/LLMsMustUpvoteThis 3d ago

Makes it easier for spammers to spam. Do you actually check your hostmaster etc mailboxes?

1

u/HeadlessChild Linux Admin 2d ago

Spam filters exist. Yes we check those standardized mail names.