From 533975933b0b89903594762a85f09915cd508905 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Kub=C3=AD=C4=8Dek?=
 <jiri.kubicek@kraxnet.cz>
Date: Wed, 10 Jan 2024 15:01:31 +0100
Subject: [PATCH] security.txt doc and typo fix

---
 .well-known/security.txt | 10 +++++-----
 README.md                | 27 +++++++++++++++++++++++++++
 2 files changed, 32 insertions(+), 5 deletions(-)
 create mode 100644 README.md

diff --git a/.well-known/security.txt b/.well-known/security.txt
index 0abb9f0..1172067 100644
--- a/.well-known/security.txt
+++ b/.well-known/security.txt
@@ -3,7 +3,7 @@ Hash: SHA256
 
 Contact: mailto:security@kraxnet.com
 Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/0ECE09253E2394088F47077CC9C4569EB636C3DB
-Encryption: https://kraxnet.com/security/punblickey.txt
+Encryption: https://kraxnet.com/security/publickey.txt
 Policy: https://kraxnet.com/security/policy
 Preferred-Languages: en, cs, sk, de
 Canonical: https://kraxnet.com/.well-known/security.txt
@@ -20,8 +20,8 @@ Expires: 2025-01-01T00:00:00.000Z
 #  **   **  **   ** **   ** **   ** **   ** ******  ******
 -----BEGIN PGP SIGNATURE-----
 
-iIsEARMIADMWIQQOzgklPiOUCI9HB3zJxFaetjbD2wUCZZ38nRUcc2VjdXJpdHlA
-a3JheG5ldC5jb20ACgkQycRWnrY2w9te5gD/atmoh2FYlJ9EyaCNtblAPuVE2LH2
-8Z8J3XtQYTpxsJ8A+gKQjRKfgdYDO+iL8ncXKtSmtmog1kLFYiRlLBNght6m
-=QveB
+iIsEARMIADMWIQQOzgklPiOUCI9HB3zJxFaetjbD2wUCZZ6iZxUcc2VjdXJpdHlA
+a3JheG5ldC5jb20ACgkQycRWnrY2w9uOXQEAk6QZjRdAS6E5rQQvqh4TYI3nXpsV
+aOvyfx/kzIkNC10A/0HEIQmBkHX7amY8f6Vn9KpJ58axXG4a5blp2P61fney
+=Z0u7
 -----END PGP SIGNATURE-----
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..f7961d3
--- /dev/null
+++ b/README.md
@@ -0,0 +1,27 @@
+# kraxnet.com website
+
+Jekyll based website hosted as github pages.
+
+## security.txt
+
+
+This website includes a security.txt file, which requires regular review, and its expiration should be extended at least once a year. 
+
+After each modification, the file needs to be re-signed.  Please remove the header and signature sections:
+
+```
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+-----BEGIN PGP SIGNATURE-----
+
+<signature to be removed>
+-----END PGP SIGNATURE-----
+```
+
+Then sign and rename new plaintext file:
+
+``` shell
+GNUPGHOME=~/.gnupg/trezor gpg --clearsign .well-known/security.txt
+mv .well-known/security.txt.asc .well-known/security.txt
+```