# DChat vulnerability disclosure. RFC 9116.
# https://dchat.online/security.html

Contact: https://dchat.online/security.html#report
Expires: 2027-07-21T00:00:00.000Z
Policy: https://dchat.online/security.html#disclosure
Preferred-Languages: en, ar
Canonical: https://dchat.online/.well-known/security.txt

# In scope: the DChat Android client, the DChat SDK, the chain nodes and
# validators, the relay swarm, the group-call SFU, and dchat.online itself.
# Out of scope, and documented as such rather than hidden:
# https://dchat.online/security.html#not-covered