Sensitive security bug reports should be filed on the Chromium bug tracker. Please make sure to select the Security template, as this will ensure the correct access controls are in place.  However, if you must use email to reach us and wish to protect the message in transit, you can use this PGP key and send to security@chromium.org