"Recommended" is a bad word :)

I just opened https://www.w3.org/Bugs/Public/show_bug.cgi?id=25607, "Need to advise authors about security considerations"

As it says in the entry, "This defect is in collaboration with Kenny Paterson. I believe that taking the fixes below will also address 18925, 23499, 25431 (maybe, by lack of use:), 25569."

The number of changes that need to be made is small, non-intrusive, and hopefully not controversial.  In addition to Kenny, thanks to Ryan for an interesting discussion (albeit mostly via twitter :).

                /r$

PS:  As I am not on this list, please CC me on any replies.

--
Principal Security Engineer
Akamai Technologies, Cambridge, MA
IM: rsalz@jabber.me<mailto:rsalz@jabber.me>; Twitter: RichSalz