>> I worry about something like "protocol-vulnerabilities@xxxxxxxx" becoming swamped with implementation issues, but I would support this if we agreed it was a two-year experiment or something. > Too much success ? We are not paying money, so why the fear ? Any similar problems in other places ? Overloading the people who will be filtering the emails.