By request of Troy Hunt on Twitter: https://twitter.com/troyhunt/status/1682982538409828354
Note certain requirements from the RFC, including but not limited to: https://datatracker.ietf.org/doc/html/rfc9116
For web-based services, organizations MUST place the "security.txt" file under the "/.well-known/" path
The file MUST be accessed via HTTP 1.0 or a higher version, and the file access MUST use the "https" scheme
It MUST have a Content-Type of "text/plain" with the default charset parameter set to "utf-8"