Our own forgeAugust 18, 2026
The validator that lies: an em dash versus our PGP signature
The reference security.txt validator accused our PGP block of being invalid. The real culprit: an em dash in a comment, and a library that decodes signed files as Latin-1. Lesson: validate with the validator's own tooling.
1 min read