Investigate status of security@ mailing list
Hi, it seems the security@gnome.org mailing list is still operational. This is a significant oversight because nobody from GNOME Security has been monitoring this list since release-team@gnome.org was decommissioned. Is it possible to configure it to reject mails and autorespond with a link to https://security.gnome.org/? (CC: @ebassi)
Ideally we would also check the archives to see how many reports we've been missing.
There's some private context here where we finally noticed that @aklapper was still receiving these mails.