Security.txt - Historique des versions

Scarpentier le 5 juillet 2021 à 10:18

2021-07-05T10:18:45Z

Scarpentier le 5 juillet 2021 à 10:18

2021-07-05T10:18:20Z

Scarpentier le 5 juillet 2021 à 10:17

2021-07-05T10:17:44Z

Scarpentier le 5 juillet 2021 à 10:17

2021-07-05T10:17:13Z

Scarpentier le 5 juillet 2021 à 10:16

2021-07-05T10:16:48Z

Scarpentier le 5 juillet 2021 à 10:16

2021-07-05T10:16:27Z

Scarpentier le 5 juillet 2021 à 10:14

2021-07-05T10:14:58Z

Scarpentier le 5 juillet 2021 à 10:14

2021-07-05T10:14:46Z

Scarpentier le 5 juillet 2021 à 10:12

2021-07-05T10:12:52Z

Scarpentier le 5 juillet 2021 à 10:11

2021-07-05T10:11:24Z

@@ Ligne 3 : / Ligne 3 : @@
 C0
 </btn>
-=== <center><div style="color:#FFFFFF; background-color: #2DDFD5">'''Security contact'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF">'''Security contact'''</div></center> ===
 We provide a security.txt file for structured security contact information. You may also use email, via csirt@docaposte.fr addresse, but please remember that email is unencrypted by default and should not contain confidential or security-related information.
-=== <center><div style="color:#FFFFFF; background-color: #2DDFD5>'''Security statement'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF>'''Security statement'''</div></center> ===
 The security of this site is of great importance and every effort is made to maintain industry-leading standards and processes. Security updates to all levels of software are implemented within a very short time-frame and the site is monitored constantly for modified files and unauthorised login attempts. Unless it is absolutely necessary to deliver the content or service you have requested, we do not record or process personal data. All links to third party sites are clearly marked and embedded content is identifiable and disclosed. For more information please refer to our privacy policy.
-=== <center><div style="color:#FFFFFF; background-color: #009EE0">'''Disclosure policy'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF">'''Disclosure policy'''</div></center> ===
 If you believe this site has a security vulnerability, we would be very happy to hear from you, provided that you follow the terms of our disclosure process:
@@ Ligne 33 : / Ligne 33 : @@
 We will not take legal action against anyone who reports a security concern to us privately, in accordance with this policy, and without having undertaken intrusive testing. We are not currently able to offer ‘bug bounties’ or similar cash rewards, but, with your consent, we would be happy to publish an acknowledgement on this site to express our gratitude.
-=== <center><div style="color:#FFFFFF; background-color: #009EE0">'''Thanks and acknowledgements'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF">'''Thanks and acknowledgements'''</div></center> ===
 CSIRT DOCAPOSTE would like to thank the following testers, researchers, and developers:
 * '''SLCC LA POSTE'''

@@ Ligne 3 : / Ligne 3 : @@
 C0
 </btn>
-=== <center><div style="color:#FFFFFF; background-color: #FF5657">'''Security contact'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #2DDFD5">'''Security contact'''</div></center> ===
 We provide a security.txt file for structured security contact information. You may also use email, via csirt@docaposte.fr addresse, but please remember that email is unencrypted by default and should not contain confidential or security-related information.
-=== <center><div style="color:#FFFFFF; background-color: #FF5657>'''Security statement'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #2DDFD5>'''Security statement'''</div></center> ===
 The security of this site is of great importance and every effort is made to maintain industry-leading standards and processes. Security updates to all levels of software are implemented within a very short time-frame and the site is monitored constantly for modified files and unauthorised login attempts. Unless it is absolutely necessary to deliver the content or service you have requested, we do not record or process personal data. All links to third party sites are clearly marked and embedded content is identifiable and disclosed. For more information please refer to our privacy policy.

@@ Ligne 3 : / Ligne 3 : @@
 C0
 </btn>
-=== <center><div style="color:#FFFFFF; background-color: #0000FF">'''Security contact'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #FF5657">'''Security contact'''</div></center> ===
 We provide a security.txt file for structured security contact information. You may also use email, via csirt@docaposte.fr addresse, but please remember that email is unencrypted by default and should not contain confidential or security-related information.
-=== <center><div style="color:#FFFFFF; background-color: #0000FF>'''Security statement'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #FF5657>'''Security statement'''</div></center> ===
 The security of this site is of great importance and every effort is made to maintain industry-leading standards and processes. Security updates to all levels of software are implemented within a very short time-frame and the site is monitored constantly for modified files and unauthorised login attempts. Unless it is absolutely necessary to deliver the content or service you have requested, we do not record or process personal data. All links to third party sites are clearly marked and embedded content is identifiable and disclosed. For more information please refer to our privacy policy.

@@ Ligne 3 : / Ligne 3 : @@
 C0
 </btn>
-=== <center><div style="color:#0000FF; background-color: #009EE0">'''Security contact'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF">'''Security contact'''</div></center> ===
 We provide a security.txt file for structured security contact information. You may also use email, via csirt@docaposte.fr addresse, but please remember that email is unencrypted by default and should not contain confidential or security-related information.
-=== <center><div style="color:#0000FF; background-color: #0000FF>'''Security statement'''</div></center> ===
+=== <center><div style="color:#FFFFFF; background-color: #0000FF>'''Security statement'''</div></center> ===
 The security of this site is of great importance and every effort is made to maintain industry-leading standards and processes. Security updates to all levels of software are implemented within a very short time-frame and the site is monitored constantly for modified files and unauthorised login attempts. Unless it is absolutely necessary to deliver the content or service you have requested, we do not record or process personal data. All links to third party sites are clearly marked and embedded content is identifiable and disclosed. For more information please refer to our privacy policy.

@@ Ligne 7 : / Ligne 7 : @@
 We provide a security.txt file for structured security contact information. You may also use email, via csirt@docaposte.fr addresse, but please remember that email is unencrypted by default and should not contain confidential or security-related information.
-=== <center><div style="color:#FFFFFF; background-color: #009EE0">'''Security statement'''</div></center> ===
+=== <center><div style="color:#0000FF; background-color: #0000FF>'''Security statement'''</div></center> ===
 The security of this site is of great importance and every effort is made to maintain industry-leading standards and processes. Security updates to all levels of software are implemented within a very short time-frame and the site is monitored constantly for modified files and unauthorised login attempts. Unless it is absolutely necessary to deliver the content or service you have requested, we do not record or process personal data. All links to third party sites are clearly marked and embedded content is identifiable and disclosed. For more information please refer to our privacy policy.

← Version précédente		Version du 5 juillet 2021 à 10:14
Ligne 37 :		Ligne 37 :
	CSIRT DOCAPOSTE would like to thank the following testers, researchers, and developers:		CSIRT DOCAPOSTE would like to thank the following testers, researchers, and developers:

−	* SLCC LA POSTE	+	* '''SLCC LA POSTE'''

← Version précédente		Version du 5 juillet 2021 à 10:14
Ligne 31 :		Ligne 31 :
	When a potential security issue is reported privately in accordance with these terms, we will check the issue and respond within one working week if you have provided valid contact details.		When a potential security issue is reported privately in accordance with these terms, we will check the issue and respond within one working week if you have provided valid contact details.

−	We will not take legal action against anyone who reports a security concern to us privately, in accordance with this policy, and without having undertaken intrusive testing. We are not currently able to offer ‘bug bounties’ or similar cash rewards.	+	We will not take legal action against anyone who reports a security concern to us privately, in accordance with this policy, and without having undertaken intrusive testing. We are not currently able to offer ‘bug bounties’ or similar cash rewards, but, with your consent, we would be happy to publish an acknowledgement on this site to express our gratitude.
		+
		+	=== <center><div style="color:#FFFFFF; background-color: #009EE0">'''Thanks and acknowledgements'''</div></center> ===
		+
		+	CSIRT DOCAPOSTE would like to thank the following testers, researchers, and developers:
		+
		+	* SLCC LA POSTE

← Version précédente		Version du 5 juillet 2021 à 10:12
Ligne 28 :		Ligne 28 :
	** Code injection		** Code injection
	** Remote code execution		** Remote code execution
		+
		+	When a potential security issue is reported privately in accordance with these terms, we will check the issue and respond within one working week if you have provided valid contact details.
		+
		+	We will not take legal action against anyone who reports a security concern to us privately, in accordance with this policy, and without having undertaken intrusive testing. We are not currently able to offer ‘bug bounties’ or similar cash rewards.

@@ Ligne 20 : / Ligne 20 : @@
 * The disclosure must relate to a service in our control, rather than to a matter which is the responsibility of a third party providing a service to us.
 *The disclosure must not be released to the public without our prior consent.
-Abusive or threatening language, harassment, impersonation, or any other kind of criminal activity, will be reported to the relevant authorities and pursued to the full extent of the law.
+* Abusive or threatening language, harassment, impersonation, or any other kind of criminal activity, will be reported to the relevant authorities and pursued to the full extent of the law.
 Automated penetration testing or unauthorised attempts to gain access to our site will be treated by us as a deliberate attack and be subject to legal action.
 * The disclosure must relate to a matter set out below and specifically not to matters such as the exact configuration of our current security headers or to recently announced zero-day vulnerabilities: