>> Please don't publish a security.txt file. See the previous discussions >> on SAAG why security.txt is not useful, and actually harmful. >I'm not sure that's an accurate characterization of the previous discussions. I agree that Paul's summary is not correct.