# anonym.community Security Policy
# https://anonym.community/.well-known/security.txt

Contact: https://anonym.community/solution-finder.html
Expires: 2027-02-20T00:00:00.000Z
Preferred-Languages: en, de
Canonical: https://anonym.community/.well-known/security.txt

# Security Measures
# - TLS 1.2/1.3 only (Let's Encrypt ECDSA)
# - HSTS with preload (max-age=63072000)
# - Content-Security-Policy: default-src 'self'
# - X-Frame-Options: SAMEORIGIN
# - X-Content-Type-Options: nosniff
# - Permissions-Policy: all sensitive APIs disabled
# - Rate limiting: 10r/s burst 20
# - Regular security updates via unattended-upgrades