# Covert Binary security.txt
# https://www.rfc-editor.org/rfc/rfc9116
#
# NO ENCRYPTION KEY IS PUBLISHED. The key previously advertised here came from a prior
# AI-built export; its private half existed on no host and no keyserver, and the owner
# confirmed on COV-86 that he never held it. Publishing a key nobody can decrypt with
# is worse than publishing none, so the Encryption: field stays out until the owner
# generates and holds a replacement key himself -- see COV-86 / P4 (COV-16).
#
# All URLs are on the apex, matching the www -> apex 301 and the canonical URLs the
# build emits. A Canonical: line that redirects is treated as a mismatch by some
# scanners, so this file must never point at the www hostname.

Contact: mailto:contact@covertbinary.com
Preferred-Languages: en, bg
Canonical: https://covertbinary.com/.well-known/security.txt
Policy: https://covertbinary.com/contact

# Expires must be ISO-8601 (UTC) and less than 1 year out.
# Update this date when refreshing the PGP key or contact info.
Expires: 2027-05-01T00:00:00.000Z