# DRAFT: replace every bracketed value before launch (docs/legal/README.md lists them).
# Expires must be a date no more than one year ahead (RFC 9116). Refresh it at least every 6 months.
Contact: mailto:security@[domain]
Expires: [YYYY-MM-DDThh:mm:ss.000Z]
Preferred-Languages: en
Policy: https://[domain]/security
Canonical: https://[domain]/.well-known/security.txt