Security assessment

[root]

* Security assessment
            * SQL injection/XSS in management interface [mostly completed]
            * Parser
            * User accounts
            * Availability
            * Proper cryptographic randomness where required (http://www.phptalk.net/2009/01/27/all-about-randomness-and-entropy/)

[root (n-root-psiphon-ca)]

Here's a link to known Apache vulnerabilities:

                == http://httpd.apache.org/security/vulnerabilities_22.html ==