@misc{rfc9116,
    series =    {Request for Comments},
    number =    9116,
    howpublished =  {RFC 9116},
    publisher = {RFC Editor},
    doi =       {10.17487/RFC9116},
    url =       {https://www.rfc-editor.org/info/rfc9116},
    author =    {Edwin Foudil and Yakov Shafranovich},
    title =     {{A File Format to Aid in Security Vulnerability Disclosure}},
    pagetotal = 21,
    year =      2022,
    month =     apr,
    abstract =  {When security vulnerabilities are discovered by researchers, proper reporting channels are often lacking. As a result, vulnerabilities may be left unreported. This document defines a machine-parsable format ("security.txt") to help organizations describe their vulnerability disclosure practices to make it easier for researchers to report vulnerabilities.},
}