RFC 9116 was recently RFC'd and it describes a simple concept: listing your security contact details in a simple text file. While this concept has been floating around for a while, it is now an official RFC. Companies that adopt this concept will hopefully have a much easier time receiving vulnerability disclosures from researchers since it clearly identifies how companies should contact them.