# NMTS — how to report a security problem (RFC 9116)
#
# Two ways in, both fine. Email reaches the operator directly. The form needs no
# account and no email address of yours: it hands you a reference number and a
# reading code, and you come back with those to read the answer.
# ⚠ Messages in the form are deleted after 30 days. For a long thread, use email.
#
# Please include what you did, what happened, and how we can see it ourselves.
# If a report needs a file or a screenshot, say so and we will tell you where to
# put it — this form takes text only.
#
# What NMTS holds and what it cannot: files are encrypted in the browser, so the
# operator cannot decrypt file contents. The server does see file counts, sizes
# and times. That is worth knowing before you write, because it shapes what a
# finding means.

Contact: mailto:nmts@nmts.me
Contact: https://nmts.me/ask
Policy: https://nmts.me/security
Canonical: https://nmts.me/.well-known/security.txt
Preferred-Languages: ko, en
Expires: 2027-02-17T00:00:00.000Z