Today I found this information (while reading WAHH2) and I thought to share it with you. You can have free access at the archive at:
http://lists.webappsec.org/pipermail/we ... ppsec.org/
"What is The Web Security Mailing List?
The Web Security Mailing List is an open information forum for discussing topics relevant to web security. Topics include, but are not limited to, industry news and technical discussions surrounding web applications, proxies, honeypots, new attack types, methodologies, application firewalls, discoveries, experiences, web servers, application servers, database security, tools, solutions, and others. "
I already found some interesting topics.