# CSVUndo security contact — RFC 9116.
#
# proof.html invites visitors to verify the privacy claims themselves ("don't take our
# word for it"). Until this file existed there was no channel for anyone who took that
# invitation and found something: the realistic disclosure path for a reporter was a blog
# post, which is the worst possible way for the owner to learn about a bug in a tool that
# rewrites people's data.
#
# The address below is the owner's deliberate choice and is the same one published on
# contact.html. Do NOT "correct" it to a daataadirect address — that mismatch has been
# talked out already.
#
# Expires is REQUIRED by RFC 9116 and scanners treat an expired file as no file at all,
# so this needs re-dating roughly once a year. Keep it under 12 months out; a far-future
# date is the same as no expiry and defeats the point of the field.
#
# There is deliberately no Encryption: line — publishing a PGP key nobody holds the
# private half of is worse than publishing none, because it makes reports undeliverable.

Contact: mailto:abdulrehmanabdul0303@gmail.com
Expires: 2027-08-11T23:59:59.000Z
Preferred-Languages: en
Canonical: https://csvundo.com/.well-known/security.txt