Version 0.53.0
2026-08-17 16:37:48 UTC
HotfixBeta
Changed
1Added mail as a second way to report a security problem, and said plainly that messages in the form are deleted after 30 days.
The address nmts@nmts.me is already named throughout the terms, and it is the one most researchers and automated tools reach for, so it is now the first contact in security.txt. It also matters that it is the durable one: messages sent through the question form are deleted after 30 days, which is short for an exchange about a defect. The security page now says both things.