Contact: mailto:security@sechb.com
Contact: https://t.me/dxvpnbot
Expires: 2027-01-01T00:00:00Z
Encryption: https://dxvpn.sechb.com/.well-known/pgp-key.txt
Preferred-Languages: en, ru
Canonical: https://dxvpn.sechb.com/.well-known/security.txt
Policy: https://dxvpn.sechb.com/security
Acknowledgments: https://dxvpn.sechb.com/security#acknowledgments

# DXVPN security-disclosure policy.
#
# If you believe you've found a security issue in DXVPN (dxvpn.sechb.com,
# the Telegram bot @dxvpnbot, the iOS apps, or any of our node
# infrastructure), please report it to the contacts above. We aim to
# acknowledge within 48h. We respect good-faith research and will not
# take legal action against researchers who follow responsible disclosure.
#
# Please do NOT disclose publicly before we have had a chance to respond
# and coordinate a fix.
#
# TODO (ops): upload the ASCII-armored public export of GPG key
# 5E0FEF6D5599ECC8 to the Encryption: URL above. Command:
#   gpg --armor --export 5E0FEF6D5599ECC8 > pgp-key.txt
# Keep the published copy in sync with what is advertised on the
# sechb.com keyservers / website.