Consider using a centralized security.txt for multiple managed domains

[bwbroersma]

See the internet.nl security.txt text:

Redirecting to a security.txt on another domain name is allowed. Especially in the case of a large domain name portfolio, it is advisable from a maintenance perspective to redirect the domain names to a central security.txt.

It's easier to manage one file, than many. It was rephrased a few years ago:

• Advice for having a central security.txt internetstandards/Internet.nl#1006

[Coretteket]

Open State currently does not have a security.txt, only a responsible disclouse page. I will raise this internally!