Contact
Email hello@cmattfletcher.com with a subject beginning Security: charlesmatthewfletcher.com, or use the C. Matt Fletcher contact page. Include enough detail to reproduce and assess the issue, while avoiding unnecessary personal or sensitive data.
Scope
This policy covers charlesmatthewfletcher.com and www.charlesmatthewfletcher.com.
Please avoid
- Denial-of-service or resource-exhaustion testing.
- Brute-force attacks, credential stuffing or password spraying.
- Social engineering, phishing or contacting third parties.
- Accessing, modifying, deleting or retaining data that is not yours.
- Testing that materially disrupts the site or its hosting.
Good-faith reports
Good-faith reports are welcome. If you are unsure whether planned testing is appropriate, contact me before proceeding.
The machine-readable policy is published at /.well-known/security.txt.