> Putting this information in the same realm you have a security issue with is just not a good idea ... It depends. If someone uses the one at openssl.org, will they be reporting an issue in the libraries, the software, the website? My money's on the first. Similarly, if there were one at www.akamai.com, how would that be used? >perfect example of 927 No, seems pretty clear that the others aren't as successful as we want/need. Whois/rdap? Who uses that? -- last-call mailing list last-call@xxxxxxxx https://www.ietf.org/mailman/listinfo/last-call