# Once Books security contact — RFC 9116.
#
# `/security.txt` 301s here (see public/_redirects), so both the well-known
# location scanners check and the bare path people type resolve to this file.
#
# `Expires` is required by the RFC and is what makes a stale file detectable:
# a researcher reading an expired contact has no reason to trust it. Renew it
# in place. `scripts/security-txt.test.mjs` fails once this date is inside 30
# days, so the renewal lands before the file goes stale rather than after.

Contact: mailto:security@oncebooks.com
Expires: 2027-09-19T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.oncebooks.com/.well-known/security.txt