-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Security Policy for jmrp.io
# RFC 9116: https://www.rfc-editor.org/rfc/rfc9116.html

Contact: mailto:mail@jmrp.io
Contact: https://github.com/jmrplens/jmrp.io/security/advisories/new
Encryption: openpgp4fpr:0A993B268654DBBA52B7E8D3FCF653391E2C91FC
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/0A993B268654DBBA52B7E8D3FCF653391E2C91FC
Preferred-Languages: en, es
Canonical: https://jmrp.io/.well-known/security.txt
Policy: https://github.com/jmrplens/jmrp.io/security/policy

# Hiring: security-adjacent work is part of what I do; the CV is the
# canonical place where that is listed.
Hiring: https://jmrp.io/cv/

# Bug-Bounty is registered with IANA (CERT CVD 3.5.5) though it is not in
# RFC 9116 itself. Declared False so a reporter knows up front that there
# is no money behind this, rather than finding out after the work.
Bug-Bounty: False

# Expires: This file should be reviewed and updated annually
Expires: 2027-04-09T23:59:59.000Z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQKmTsmhlTbulK36NP89lM5HiyR/AUCapV2XQAKCRD89lM5HiyR
/EWxAQC9rik8ZAM9LjxfS9tKjlrSc9GbcFNOHZSdKcygIjp7hgEAlCpI1GlycBOi
oYkMyzoWrSFdvQfbwUS2lYhqaWaOkww=
=Z0mE
-----END PGP SIGNATURE-----