[DNSOP] DNS Security TXT - A standard for nominating security contact points and policies via DNS TXT records

[Stephane Bortzmeyer <[e-mail]>]

It does not seem there is an Internet-Draft for this but it may interest people here:

Summary:
The report channel, published in DNS

When people find security issues in Internet-facing systems, the
correct channel to report them isn't always clear, and the relevant
disclosure policy for the system isn't always apparent. DNS Security
TXT extends the work done by security.txt to answer this question
using DNS, arguably the most ubiquitous system on the Internet.

When deployed, it gives security researchers, Internauts, and
concerned Internet citizens clear and authoritative direction to the
correct channels for reporting security issues, and to the policies an
organization sets out for all systems under a domain.

https://dnssecuritytxt.org/