Follow
"RFC 9116
A File Format to Aid in Security Vulnerability Disclosure"
https://www.rfc-editor.org/rfc/rfc9116
Seems it's official, the RFC for "securiy.txt" got published.
@dethos Thank you for the link. Not too sure how serious folks are going to be about this. It's dry and dull, which is to say, an RFC. But there it is, all structured and serious-sounding anyways. :)