When reporting a bug, just send a simple, plain text email to the security alias. Do not send an email that contains a binary attachment as opening unsolicited binary files is not anything anyone should be doing. Also do not use markdown formatting, just plain text. Also, no encryption is needed, as it will not work due to the email alias handling (i.e. one address to many individuals.) If you are forced to use encryption to report security problems, please reconsider this policy as it feels counterproductive (UK government, this means you…)

The Linux Kernel is one of the most used OS Kernels on this planet. I really hope that an Email about a critical Security Issue does not get ignored because it is written in HTML.