The World Wide Web Security FAQ

Web Security considerations from the w3 consortium