RFC 9116 compliance

Contact (required)

At least one Contact: field with a mailto: or https:// URI.

Expires (required)

ISO 8601 datetime that must be in the future. Flowpane warns if within 30 days.

Optional fields

• Encryption — PGP key link
• Acknowledgments — hall of fame URL
• Preferred-Languages — e.g. en, fr, de
• Canonical — canonical URL of the file itself
• Policy — vulnerability disclosure policy URL
• Hiring — security job openings URL