Noticed this in #1. Draft updated to clarify that security.txt files _must_ use `https://`.
Noticed this in #1. Draft updated to clarify that security.txt files must use
https://.