awesome-well-known

A curated list of well-known URIs, resources, guides and tools (RFC 5785)

The .well-known URIs (HTTP)

Specifications

• Defining Well-Known Uniform Resource Identifiers (URIs) - https://tools.ietf.org/html/rfc5785

.well-known/-prefixed URIs

• .well-known/acme-challenge
• .well-known/apple-app-site-association
• .well-known/apple-developer-merchant-domain-association
• .well-known/ashrae
• .well-known/assetlinks.json
  • https://developers.google.com/digital-asset-links/v1/getting-started
• .well-known/brave-payments-verification.txt
• .well-known/brave-rewards-verification.txt
• .well-known/browserid
• .well-known/caldav
• .well-known/carddav
• .well-known/change-password
  • https://github.com/WICG/change-password-url
• .well-known/core
• .well-known/csvm
• .well-known/dnt
• .well-known/dnt-policy.txt
• .well-known/est
• .well-known/genid
• .well-known/hackers.txt
• .well-known/hoba
• .well-known/host-meta
• .well-known/host-meta.json
• .well-known/humans.txt
  • https://humanstxt.org
  • https://www.reddit.com/r/web_design/comments/260hfj/how_many_of_you_use_the_humanstxt_if_not_why/
• .well-known/keybase.txt
• .well-known/ni
• .well-known/openid-configuration
• .well-known/openorg
• .well-known/posh
• .well-known/reload-config
• .well-known/repute-template
• .well-known/security.txt
  • https://securitytxt.org
• .well-known/stun-key
• .well-known/time
• .well-known/timezone
• .well-known/void
• .well-known/webfinger

Root-only URIs

• /ads.txt
  • https://iabtechlab.com/ads-txt/
• /robots.txt
  • https://www.robotstxt.org

Resources

• Well-Known URIs on IANA: txt, html
• Wikipedia: https://en.m.wikipedia.org/wiki/List_of_/.well-known/_services_offered_by_webservers
• Search on GitHub: https://github.com/search?utf8=%E2%9C%93&q=filepath%3A%2F.well-known&type=Code
• A list of well-known path for automated webserver fingerprinting: https://github.com/ftteh/wordlists/blob/master/processed/discovery/predictable-filepaths_done/wellknown-rfc5785.txt

Related projects