> On one-side: Wouldn't it be simpler and more effective to just have a link to a public key and email address for security reporting? Well, that's what in a s

> On one-side: Wouldn't it be simpler and more effective to just have a link to a public key and email address for security reporting? Well, that's what in a security.txt file basically, contact address and encryption key. > And what about a standard for contact phone numbers given a website? Use tel URI in Contact field.