# RFC 9116. The address a researcher looks for before they look anywhere else,
# at the one path every scanner and every researcher already tries.
#
# Without this, somebody who finds a way to read another merchant's invoices has
# to guess an address, and the ones who guess wrong either give up or publish.
# This is the cheapest way to be told first.
#
# Expires is not decoration. RFC 9116 makes the field mandatory so that a stale
# file stops being trusted rather than quietly pointing at a mailbox nobody
# reads. apps/site/test/site-meta.test.mjs fails the build 30 days before the
# date below, so the renewal happens while somebody is looking.

Contact: mailto:security@invoprice.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://invoprice.com/.well-known/security.txt
Policy: https://invoprice.com/contact#security