Contact: security@iway.ch
Encryption: https://iway.ch/pgp-key.txt
Expires: 2025-12-31T00:00:0.000+01:00
Preferred-Languages: en, de

# We do not consider the following findings as security issues:
# - Missing HTTP headers (HSTS, CSP, etc.)
# - Server version disclosures
# - TLS configuration "weaknesses" without a working exploit
# - Self-XSS or issues requiring unrealistic user interaction
# - Findings from automated scanners without proof-of-concept