Security.txt Standard Proposed, Similar to Robots.txt
This BleepingComputer news article from September 2017 reports that web developer Ed Foudil submitted an IETF draft to standardize security.txt, a root-hosted file describing a site's security policies. In it, Casey Ellis advises Foudil to axe first and then sandpaper, refining his many ideas one by one into a well-thought-out draft.
Source description, as published
Ed Foudil, a web developer and security researcher, has submitted a draft to the IETF — Internet Engineering Task Force — seeking the standardization of security.txt, a file that webmasters can host on their domain root and describe the site's security policies.