We are using OpenSSL for generating IV's and other random data. We initialize it using RAND_poll and, on Windows, RAND_screen. 

The question is though, if the seed generated by those methods is good enough (RAND_screen at least sounds to me like it is). Also, I was wondering how exactly RAND_poll works, as I could not find much documentation about it ant if it does behave differently depending on platform, like RAND_screen which is only available on Windows. 


Question: Are there any significant disadvantages of forwarding a naked domain to the www. homepage always?
Answer: I don't think it's a huge problem, as long as the majority of links to your site point to the www version. It's worth setting your preferred domain in Google Webmaster Tools.

If you have access to any scripting (e.g. PHP) on your site, you can add a script to the home page to handle anyone redirected from the non-www version. Check the REFERER header then redirect to the equivalent page on the www version.

This will only help users, not search engines, since they generally don't follow multiple redirects. Also, it's best to use a 302 redirect here, because having a 301 from a single URL (www.example.com) to different URLs each time will not work (browsers/SEs will cache the redirect).