Update and rename security.adoc to security-policy.adoc

[rolfedh]

Fixes: #1664

[rolfedh]

@maxandersen @sberyozkin PTAL

[rolfedh]

@gsmet Please review and merge.
cc: @sberyozkin

[rolfedh]

@gsmet Updated and ready to merge.
cc: @sberyozkin

[sberyozkin]

Hi @gsmet Can you please look at this PR ?

[rolfedh]

/assign @gsmet

[gsmet]

I'm really not sure this change will change anything for Google searchability of the security guide... and it's breaking any external link to our security page which is a no-no.

We at the minimum need to put a redirect in place.

But even so, I'm not especially excited about it.

@maxandersen @insectengine WDYT?

[rolfedh]

We at the minimum need to put a redirect in place.

Thanks. I've just added _redirects/security.md to address this.
Please see #1664 for a fuller discussion of the issue, including the original request from, I believe, @sberyozkin.

[github-actions]

🙈 The PR is closed and the preview is expired.

[maxandersen]

I've read but still I don't grok why changing this url is supposed to help?

It is a good thing it's just quarkus.io/security.

Why require the longer harder to remember/copy/read quarkus.io/security-policy url?

[maxandersen]

Changing the title I can buy or at least add security policy in top part of message but the url and redirect is a -1 from me.

[rolfedh]

I've read but still I don't grok why changing this url is supposed to help?

An SEO best practice is to align the file name and the title of the document.

[maxandersen]

thats fine but lets please not use long winded "policy" names in URLs. URLs like these are to be remembered, typed and understood easily.

quarkus.io/security is easy to remember, easy to type and most understand that page has stuff to do around quarkus security - let me read that .

quarkus.io/security-policy is not easy to remember, hard to type (is it with a or without a dash ? is it policy to not policy?, _ and if I see security-policy it is not a page I or many I can think of will go read :)z

and in addition quarkus.io/security is short and descriptive and use same keywords as in title and in page so I think we are covered.

[holly-cummins]

Piling in here ... Based on my highly representative sample of one, I can confirm what Max says. A page named http://quarkus.io/security-policy is one I'd actively try to avoid reading. 😂

[rolfedh]

Absolutely, I'm happy we've discussed this and come to a consensus. My aim was to put into action what I thought Sergey was suggesting. As it stands, we've only agreed on revising the title. So, I'll remove the changes for the redirect, altering the file name, and updating the links. The PR should be ready to merge shortly.

[rolfedh]

I'll make a parallel change to https://github.com/quarkusio/quarkus/blob/master/SECURITY.md as well.

[rolfedh]

@maxandersen @holly-cummins: Based on your feedback, I've retitled the security policy page to "Security policy" and removed everything else. Please approve so we can get this merged.

[rolfedh]

I'll make a parallel change to https://github.com/quarkusio/quarkus/blob/master/SECURITY.md as well.

• Actually, quarkusio/quarkus/blob/master/SECURITY.md states that The canonical version of this document is hosted on the Quarkus website at [Quarkus security](https://quarkus.io/security/).
• In other words, the file in this PR is the only one that needs to be updated.

[rolfedh]

@gsmet The result of our conversations is a simple change to the title. I believe this is ready to merge now.