# TillMint — how to report a security problem (RFC 9116).
# Canonical location is /.well-known/security.txt; /security.txt is a
# legacy fallback that redirects here (see deploy/nginx/tillmint.conf).
#
# MAINTENANCE: Expires is mandatory and must stay in the future — an
# expired file is treated as invalid. Bump it once a year.

Contact: mailto:hello@tillmint.nz
Expires: 2027-07-25T00:00:00.000Z
Preferred-Languages: en
Policy: https://www.tillmint.nz/trust.html#security
Canonical: https://www.tillmint.nz/.well-known/security.txt