# Security policy for jacobcampbellrealtor.com
# Format: RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116)
#
# This file previously carried built2winweb.com's policy verbatim: its domain,
# its canonical URL, and support@built2winweb.com as the contact. A researcher
# who found a flaw on THIS site was being directed to report it to a different
# company, and the Canonical field pointed at a URL this file does not live at,
# which under RFC 9116 section 3.5.2 means a consumer should treat the file as
# not applying to this domain at all.
#
# NOTE: Expires is a REQUIRED field and the file is treated as stale once it
# passes. Roll it forward about once a year.

Contact: mailto:jacobcampbell@keyes.com
Expires: 2027-08-21T00:00:00.000Z
Preferred-Languages: en, es
# TWO Canonical fields because these exact bytes are served at two URLs:
# /.well-known/security.txt (the location RFC 9116 s.3 requires) and
# /security.txt (the legacy location, kept for scanners that only probe
# there). RFC 9116 s.3.5.2 says a consumer should distrust a file whose
# Canonical set does not contain the URL it fetched, so the root copy was
# self-invalidating with only the .well-known line present. The field is
# explicitly repeatable and both copies must stay byte-identical.
Canonical: https://jacobcampbellrealtor.com/.well-known/security.txt
Canonical: https://jacobcampbellrealtor.com/security.txt
Policy: https://jacobcampbellrealtor.com/privacy.php