# Ringfully — security contact
#
# Served from public/ at the exact path requested. The proxy passes it through
# because the extension guard in proxy.ts treats any final segment containing a
# dot as a static asset, so it is never rewritten into /site.
#
# Expires must stay in the future. RFC 9116 says a consumer should ignore a
# file whose Expires has passed, so a stale date is the same as having no
# security.txt at all.

Contact: mailto:security@ringfully.com
Expires: 2027-07-31T00:00:00.000Z
Preferred-Languages: en, fr
Canonical: https://ringfully.com/.well-known/security.txt
Policy: https://ringfully.com/legal/vulnerability-disclosure