Initial web security notes.