Transport security
Connections use HTTPS and certificates issued for the active service hostname.
Minimal attack surface
The public website contains no database-backed login, upload form or third-party script.
Responsible reporting
Security issues may be reported to security@dogovor-download.org.