DUE TO SPAM, SIGN-UP IS DISABLED. Goto Selfserve wiki signup and request an account.
...
Once you have agreement in the PMC on how you want to manage your security list, you can create the list via selfservice (it will recognize the 'security' list name and set it up accordingly) and notify security@apache.org of your policy.
Unfortunately, due to technical/least-privilege constraints, currently only PMC members can visit the security list archives at https://lists.apache.org/