List is subject to single-point-of-failure.

[zebambam]

Hey Dan

I'm so glad that this list is coming together so well. I'll add our address (which is currently security@z.cash) soon - but of course it's a single point of failure for all security contact information for the whole industry, so eventually I'd expect it's something better stored by individual projects within their own repos (of course github is still an SPOF but I don't have any clever answer for that).

How about something like this? https://github.com/RD-Crypto-Spec/Responsible-Disclosure

bambam