http://www.w3.org/DesignIssues/Security-NotTheS.html

Maciej