Figure out how to set up a mailing list

[vito]

We have a Mailgun account now. wat do?

• Set up a mailing list for security team to publish notices and release info to

https://documentation.mailgun.com/en/latest/user_manual.html#mailing-lists

[vito]

Looked into setting up Mailgun but it doesn't seem to be a great fit for our use case. A few signs point to it being more focused on spamming updates to customers as opposed to a public list; subscriptions are added through an API, and there are no archives.

Looks like Google Groups might be the way to go, which is convenient because we already use it. I'll take a look and see if there's a reasonable way to integrate it with governance so e.g. any member of the 'security' team can post to it.