summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormetamuffin <metamuffin@disroot.org>2023-07-17 23:50:40 +0200
committermetamuffin <metamuffin@disroot.org>2023-07-17 23:50:40 +0200
commitc68f2769ae13d1e4b250bd670d1d875014f5c05a (patch)
tree7bb26e7c073a4e17f5d21d73fc9a1f4f955e34f2
parentb01995c9dfa957acf8c5a06c323f4b548dca3bca (diff)
downloadmetamuffin-website-c68f2769ae13d1e4b250bd670d1d875014f5c05a.tar
metamuffin-website-c68f2769ae13d1e4b250bd670d1d875014f5c05a.tar.bz2
metamuffin-website-c68f2769ae13d1e4b250bd670d1d875014f5c05a.tar.zst
lets actully sign security.txt
-rw-r--r--assets/security.txt4
-rw-r--r--assets/security.txt.asc14
-rw-r--r--src/wellknown.rs5
3 files changed, 19 insertions, 4 deletions
diff --git a/assets/security.txt b/assets/security.txt
new file mode 100644
index 0000000..6243ff9
--- /dev/null
+++ b/assets/security.txt
@@ -0,0 +1,4 @@
+Contact: mailto:metamuffin@disroot.org
+Contact: @metamuffin:metamuffin.org
+Updated: 2023-07-17
+Signed: metamuffin (mailing key)
diff --git a/assets/security.txt.asc b/assets/security.txt.asc
new file mode 100644
index 0000000..0bd2975
--- /dev/null
+++ b/assets/security.txt.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Contact: mailto:metamuffin@disroot.org
+Contact: @metamuffin:metamuffin.org
+Updated: 2023-07-17
+Signed: metamuffin (mailing key)
+-----BEGIN PGP SIGNATURE-----
+
+iI0EARYIADUWIQQtdQsSReGxQ47UHrZoED2CMCjbwAUCZLW3jxccbWV0YW11ZmZp
+bkBkaXNyb290Lm9yZwAKCRBoED2CMCjbwIEfAP4mg5CwuuUV3hZRgxbaGUJvcdLp
+63brHOwcLd+GrDk1HwD7BzPamEAVDXpxybtqNECH6eTRcL1fgp6OVL4gk0O6GQg=
+=iBfC
+-----END PGP SIGNATURE-----
diff --git a/src/wellknown.rs b/src/wellknown.rs
index 9c9bc1c..c61f52f 100644
--- a/src/wellknown.rs
+++ b/src/wellknown.rs
@@ -31,8 +31,5 @@ pub fn r_wellknown_matrix_server() -> Cors<Value> {
#[get("/.well-known/security.txt")]
pub fn r_wellknown_security() -> &'static str {
- r#"# In can case you found a security vulnerability in my services and want to disclose them privately, use the information below.
-Contact: https://metamuffin.org/contact
-Encryption: https://metamuffin.org/key.asc
- "#
+ include_str!("../assets/security.txt.asc")
}