Would it be worth starting a rails-announce list that all users could be encouraged to subscribe to? I guess there are still people who haven't heard about this yet, and also guess that they'd be more likely to sign up for a low-traffic announce list than the (much) heavier main rails list.
http://weblog.rubyonrails.org/2006/8/10/new-security-mailing-list _______________________________________________ Rails-core mailing list Rails-core@lists.rubyonrails.org http://lists.rubyonrails.org/mailman/listinfo/rails-core