I'd do it, but the problem is with that firstly maintaining it as it could easily get outdated quickly - but also security because say if I was to collect it, what is to stop me altering an e-mail address to one I own then posing as the vendor? One solution is to ask the vendor to mail me his e-mail address signed by his PGP key and they could be collated and in small groups say 10 e-mail per list have 2-3 senior forum members validate it and also sign it to say they've check the signature is valid. Not foolproof, but offers a better degree of security I imagine.I tried to start one a while ago listing the products, PGP key etc of each vendor, but there was no interest in it so decided to stop maintaining it.